I0721 20:51:33.134297 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0721 20:51:33.134584 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0721 20:51:33.134794 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0721 20:51:33.138951 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0721 20:51:33.139774 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0721 20:51:33.139888 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0721 20:51:33.140005 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0721 20:51:33.142457 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0721 20:51:33.155768 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0721 20:51:33.164415 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0721 20:51:33.164453 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0721 20:51:33.164765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0721 20:51:33.168044 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0721 20:51:33.170969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0721 20:51:33.172989 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0721 20:51:33.174994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0721 20:51:33.177192 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0721 20:51:33.178616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0721 20:51:33.182211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0721 20:51:33.186332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0721 20:51:33.188850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0721 20:51:33.190869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0721 20:51:33.192743 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0721 20:51:33.192804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0721 20:51:33.194746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0721 20:51:33.196895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0721 20:51:33.198597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0721 20:51:33.200143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0721 20:51:33.205774 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0721 20:51:33.205816 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0721 20:51:33.205934 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0721 20:51:33.209877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0721 20:51:33.213491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0721 20:51:33.220260 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.220298 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.220800 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.221186 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.237573 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.275198 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.288323 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.314800 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.318549 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:33.329516 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:51:45.049300 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-21 20:51:45.04928792 +0000 UTC m=+11.958344404 I0721 20:51:45.760165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:51:45.760659 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-21 20:51:45.760639192 +0000 UTC m=+12.669695726 I0721 20:51:45.760894 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-21 20:51:45.760870755 +0000 UTC m=+12.669927259 E0721 20:51:45.776392 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 20:51:45.776455 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-21 20:51:45.776448626 +0000 UTC m=+12.685505120 E0721 20:51:45.776583 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 20:51:45.778939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:51:45.779106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:51:45.779125 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-21 20:51:45.779120909 +0000 UTC m=+12.688177393 E0721 20:51:45.789958 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0721 20:51:45.790460 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 20:51:45.790523 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 20:51:45.790893 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0721 20:51:45.822068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:51:45.829475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9bbf7" condition "Approved" to 2026-07-21 20:51:45.829429799 +0000 UTC m=+12.738486313 I0721 20:51:45.841299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9bbf7" condition "Ready" to 2026-07-21 20:51:45.84129067 +0000 UTC m=+12.750347134 I0721 20:51:45.869604 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:51:45.869590635 +0000 UTC m=+12.778647119 I0721 20:51:45.884658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:51:45.884962 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:51:45.884956263 +0000 UTC m=+12.794012747 I0721 20:51:45.891321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:51:45.897294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:51:45.897618 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:51:45.897606976 +0000 UTC m=+12.806663490 I0721 20:51:50.791313 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:51:50.791301158 +0000 UTC m=+17.700357672 I0721 20:52:12.041294 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-21 20:52:12.041257425 +0000 UTC m=+38.950313909 I0721 20:52:12.041311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:52:12.041353 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-21 20:52:12.041343866 +0000 UTC m=+38.950400350 I0721 20:52:12.054859 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-21 20:52:12.054849283 +0000 UTC m=+38.963905757 I0721 20:52:12.079439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:52:12.079504 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-21 20:52:12.079498192 +0000 UTC m=+38.988554666 I0721 20:52:12.213624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:52:12.248060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xpj2x" condition "Approved" to 2026-07-21 20:52:12.248024928 +0000 UTC m=+39.157081432 I0721 20:52:12.282162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xpj2x" condition "Ready" to 2026-07-21 20:52:12.282146926 +0000 UTC m=+39.191203440 I0721 20:52:12.322646 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:52:12.322628616 +0000 UTC m=+39.231685130 I0721 20:52:12.344533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:52:12.344854 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:52:12.344847409 +0000 UTC m=+39.253903893 I0721 20:52:12.365078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:52:12.411419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:57:54.586675 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready" to 2026-07-21 20:57:54.586665142 +0000 UTC m=+381.495721626 I0721 20:57:54.587244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:57:54.587598 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-07-21 20:57:54.587592309 +0000 UTC m=+381.496648823 I0721 20:57:54.609650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:57:54.609711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:57:54.609725 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-07-21 20:57:54.609720331 +0000 UTC m=+381.518776805 I0721 20:57:54.919924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:57:54.928250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-8w7ft" condition "Approved" to 2026-07-21 20:57:54.928241826 +0000 UTC m=+381.837298300 I0721 20:57:54.953959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-8w7ft" condition "Ready" to 2026-07-21 20:57:54.953949141 +0000 UTC m=+381.863005625 I0721 20:57:54.982379 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:57:54.982367692 +0000 UTC m=+381.891424166 I0721 20:57:55.003671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:59:07.706937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:59:07.707991 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-21 20:59:07.707974229 +0000 UTC m=+454.617030713 I0721 20:59:07.710555 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-21 20:59:07.710542771 +0000 UTC m=+454.619599325 E0721 20:59:07.725200 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 20:59:07.725232 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-21 20:59:07.725226868 +0000 UTC m=+454.634283342 E0721 20:59:07.725263 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 20:59:07.726435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:59:07.726483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:59:07.726497 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-21 20:59:07.726493629 +0000 UTC m=+454.635550103 E0721 20:59:07.740312 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0721 20:59:07.740380 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 20:59:07.740395 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 20:59:07.740425 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0721 20:59:07.770951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-52mvd" condition "Approved" to 2026-07-21 20:59:07.770938796 +0000 UTC m=+454.679995290 I0721 20:59:07.793193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-52mvd" condition "Ready" to 2026-07-21 20:59:07.793181895 +0000 UTC m=+454.702238369 I0721 20:59:07.811433 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:59:07.81142263 +0000 UTC m=+454.720479144 I0721 20:59:07.829390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:59:07.829777 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:59:07.829771216 +0000 UTC m=+454.738827680 I0721 20:59:07.831558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:59:07.845487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:59:07.845792 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:59:07.845782664 +0000 UTC m=+454.754839148 I0721 20:59:12.740992 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:59:12.740982746 +0000 UTC m=+459.650039210 I0721 21:00:01.262707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:00:01.262864 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-21 21:00:01.262857686 +0000 UTC m=+508.171914160 I0721 21:00:01.262903 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-21 21:00:01.262893987 +0000 UTC m=+508.171950461 I0721 21:00:01.262742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:00:01.263276 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-21 21:00:01.263271442 +0000 UTC m=+508.172327906 I0721 21:00:01.262778 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-21 21:00:01.262769344 +0000 UTC m=+508.171825818 I0721 21:00:01.276064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:00:01.276095 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-21 21:00:01.276088692 +0000 UTC m=+508.185145176 I0721 21:00:01.276394 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-21 21:00:01.276390937 +0000 UTC m=+508.185447411 I0721 21:00:01.380512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:01.380571 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-21 21:00:01.380565935 +0000 UTC m=+508.289622409 I0721 21:00:01.380823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:01.380847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:00:01.380858 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-21 21:00:01.380855289 +0000 UTC m=+508.289911753 I0721 21:00:01.381007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:01.381025 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-21 21:00:01.381023192 +0000 UTC m=+508.290079666 I0721 21:00:01.668028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-z8nkw" condition "Approved" to 2026-07-21 21:00:01.668013565 +0000 UTC m=+508.577070059 I0721 21:00:01.700639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-z8nkw" condition "Ready" to 2026-07-21 21:00:01.700628515 +0000 UTC m=+508.609684979 I0721 21:00:01.731130 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:01.731111651 +0000 UTC m=+508.640168135 I0721 21:00:01.751408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:01.752433 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:01.752427735 +0000 UTC m=+508.661484209 I0721 21:00:01.782538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:01.793025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:01.892949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:01.927890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ks8xm" condition "Approved" to 2026-07-21 21:00:01.927880775 +0000 UTC m=+508.836937239 I0721 21:00:01.952593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ks8xm" condition "Ready" to 2026-07-21 21:00:01.952579152 +0000 UTC m=+508.861635626 I0721 21:00:01.989752 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:01.989741493 +0000 UTC m=+508.898797957 I0721 21:00:02.024754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:02.025144 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:02.025136505 +0000 UTC m=+508.934192989 I0721 21:00:02.059566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:02.059998 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:02.059987599 +0000 UTC m=+508.969044103 I0721 21:00:02.106934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:02.243159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8lczh" condition "Approved" to 2026-07-21 21:00:02.24314415 +0000 UTC m=+509.152200634 I0721 21:00:02.348085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8lczh" condition "Ready" to 2026-07-21 21:00:02.348061878 +0000 UTC m=+509.257118362 I0721 21:00:02.790988 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:02.790976594 +0000 UTC m=+509.700033078 I0721 21:00:02.888493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:02.889072 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:02.889064156 +0000 UTC m=+509.798120650 I0721 21:00:03.184937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:03.327146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:17.142379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:00:17.142424 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls" condition "Issuing" to 2026-07-21 21:00:17.142414985 +0000 UTC m=+524.051471469 I0721 21:00:17.142670 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls" condition "Ready" to 2026-07-21 21:00:17.142662468 +0000 UTC m=+524.051718952 I0721 21:00:17.158484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:17.158542 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls" condition "Ready" to 2026-07-21 21:00:17.158535425 +0000 UTC m=+524.067591899 I0721 21:00:17.471728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:17.504582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tmf7w-m2phw" condition "Approved" to 2026-07-21 21:00:17.5045693 +0000 UTC m=+524.413625814 I0721 21:00:17.523813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tmf7w-m2phw" condition "Ready" to 2026-07-21 21:00:17.523803659 +0000 UTC m=+524.432860143 I0721 21:00:17.550425 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:17.550410642 +0000 UTC m=+524.459467126 I0721 21:00:17.568503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tmf7w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:47.517233 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:00:47.517544 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-21 21:00:47.517526959 +0000 UTC m=+554.426583463 I0721 21:00:47.517271 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-21 21:00:47.517229255 +0000 UTC m=+554.426285729 I0721 21:00:47.728095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:00:47.728318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:00:47.728368 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-21 21:00:47.728361191 +0000 UTC m=+554.637417685 I0721 21:00:49.069498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4q9qs" condition "Approved" to 2026-07-21 21:00:49.069484875 +0000 UTC m=+555.978541389 I0721 21:00:49.385971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4q9qs" condition "Ready" to 2026-07-21 21:00:49.385960362 +0000 UTC m=+556.295016836 I0721 21:00:49.427153 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:00:49.427140482 +0000 UTC m=+556.336196946 I0721 21:00:49.451266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:45.180755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:03:45.180807 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-21 21:03:45.180794169 +0000 UTC m=+732.089850673 I0721 21:03:45.181255 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-21 21:03:45.181239154 +0000 UTC m=+732.090295648 I0721 21:03:45.200962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:45.201117 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-21 21:03:45.201100676 +0000 UTC m=+732.110157180 I0721 21:03:45.384571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:45.419596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4l5jd" condition "Approved" to 2026-07-21 21:03:45.419581593 +0000 UTC m=+732.328638097 I0721 21:03:45.453963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4l5jd" condition "Ready" to 2026-07-21 21:03:45.453951076 +0000 UTC m=+732.363007550 I0721 21:03:45.483923 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:03:45.483911035 +0000 UTC m=+732.392967509 I0721 21:03:45.510708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:45.564981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:25.445071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:04:25.445102 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-21 21:04:25.445096173 +0000 UTC m=+772.354152647 I0721 21:04:25.445370 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-21 21:04:25.445366162 +0000 UTC m=+772.354422626 I0721 21:04:25.462154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:25.462304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:04:25.462418 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-21 21:04:25.46237603 +0000 UTC m=+772.371432544 I0721 21:04:25.632107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:25.641405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-s9tdb" condition "Approved" to 2026-07-21 21:04:25.641393674 +0000 UTC m=+772.550450158 I0721 21:04:25.669072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-s9tdb" condition "Ready" to 2026-07-21 21:04:25.669061493 +0000 UTC m=+772.578117977 I0721 21:04:25.694983 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:25.694968123 +0000 UTC m=+772.604024637 I0721 21:04:25.724386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:25.724731 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:25.724723689 +0000 UTC m=+772.633780173 I0721 21:04:25.761008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"