I0714 23:02:29.434686 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0714 23:02:29.434792 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 23:02:29.434926 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 23:02:29.440348 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 23:02:29.440791 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0714 23:02:29.440986 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 23:02:29.440993 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 23:02:29.445241 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 23:02:29.458739 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 23:02:29.465381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 23:02:29.467119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 23:02:29.473357 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 23:02:29.475725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 23:02:29.477994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 23:02:29.480406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 23:02:29.483187 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 23:02:29.483215 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 23:02:29.483354 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 23:02:29.489407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 23:02:29.489558 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 23:02:29.496367 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 23:02:29.497421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 23:02:29.499373 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 23:02:29.499410 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 23:02:29.501198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 23:02:29.502954 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 23:02:29.504632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 23:02:29.506332 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 23:02:29.506351 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 23:02:29.506358 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 23:02:29.506506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 23:02:29.508381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 23:02:29.510945 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0714 23:02:29.513309 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.515736 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.516905 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.532124 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.544549 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.558471 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.577994 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.601799 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.616219 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:29.616824 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 23:02:40.819915 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-14 23:02:40.819897398 +0000 UTC m=+11.423454028 I0714 23:02:41.492172 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-14 23:02:41.492158798 +0000 UTC m=+12.095715428 I0714 23:02:41.492251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:02:41.492278 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 23:02:41.49227109 +0000 UTC m=+12.095827720 E0714 23:02:41.507302 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 23:02:41.507484 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-14 23:02:41.507416643 +0000 UTC m=+12.110973273 E0714 23:02:41.507551 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 23:02:41.509719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:02:41.509990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:02:41.510020 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 23:02:41.510012967 +0000 UTC m=+12.113569597 E0714 23:02:41.519478 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0714 23:02:41.519545 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 23:02:41.519566 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 23:02:41.519614 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0714 23:02:41.544277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7976q" condition "Approved" to 2026-07-14 23:02:41.544267658 +0000 UTC m=+12.147824288 I0714 23:02:41.556698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7976q" condition "Ready" to 2026-07-14 23:02:41.556688795 +0000 UTC m=+12.160245405 I0714 23:02:41.573698 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:02:41.573685518 +0000 UTC m=+12.177242138 I0714 23:02:41.591112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:02:41.628384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:02:46.520279 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:02:46.520262123 +0000 UTC m=+17.123818773 I0714 23:03:07.725627 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 23:03:07.725589528 +0000 UTC m=+38.329146158 I0714 23:03:07.725902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:03:07.726000 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 23:03:07.725977764 +0000 UTC m=+38.329534394 I0714 23:03:07.741499 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-14 23:03:07.741491255 +0000 UTC m=+38.345047875 I0714 23:03:07.806546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:03:07.806603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:03:07.806619 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 23:03:07.806614426 +0000 UTC m=+38.410171046 I0714 23:03:08.091436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:03:08.100077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4wcq5" condition "Approved" to 2026-07-14 23:03:08.100063902 +0000 UTC m=+38.703620552 I0714 23:03:08.129315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4wcq5" condition "Ready" to 2026-07-14 23:03:08.129299488 +0000 UTC m=+38.732856138 I0714 23:03:08.157177 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:03:08.157165444 +0000 UTC m=+38.760722064 I0714 23:03:08.185879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:03:08.199565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:03:08.249125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:10.444349 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-88.nip.io-tls" condition "Ready" to 2026-07-14 23:07:10.444328551 +0000 UTC m=+281.047885181 I0714 23:07:10.444350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-88.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:07:10.444415 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-88.nip.io-tls" condition "Issuing" to 2026-07-14 23:07:10.444407993 +0000 UTC m=+281.047964623 I0714 23:07:10.460740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-88.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-88.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:10.460792 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-88.nip.io-tls" condition "Ready" to 2026-07-14 23:07:10.460786724 +0000 UTC m=+281.064343344 I0714 23:07:10.640704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-88.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-88.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:10.666895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-88.nip.io-tls-dntpl" condition "Approved" to 2026-07-14 23:07:10.666880184 +0000 UTC m=+281.270436814 I0714 23:07:10.692230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-88.nip.io-tls-dntpl" condition "Ready" to 2026-07-14 23:07:10.692215812 +0000 UTC m=+281.295772432 I0714 23:07:10.717176 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-88.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:07:10.717165912 +0000 UTC m=+281.320722542 I0714 23:07:10.739301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-88.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-88.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:19.019019 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-14 23:08:19.018948597 +0000 UTC m=+349.622505227 I0714 23:08:19.019018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:08:19.019237 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 23:08:19.019196451 +0000 UTC m=+349.622753101 I0714 23:08:19.032585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0714 23:08:19.032795 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 23:08:19.032822 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-14 23:08:19.032816655 +0000 UTC m=+349.636373285 E0714 23:08:19.032882 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 23:08:19.033212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:08:19.033241 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 23:08:19.033235782 +0000 UTC m=+349.636792412 E0714 23:08:19.049140 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0714 23:08:19.051105 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 23:08:19.051219 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 23:08:19.051347 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0714 23:08:19.070359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nbb72" condition "Approved" to 2026-07-14 23:08:19.070349186 +0000 UTC m=+349.673905816 I0714 23:08:19.085115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nbb72" condition "Ready" to 2026-07-14 23:08:19.085099371 +0000 UTC m=+349.688656001 I0714 23:08:19.109442 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:08:19.109424375 +0000 UTC m=+349.712981025 I0714 23:08:19.132052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:19.132250 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:08:19.132244164 +0000 UTC m=+349.735800794 I0714 23:08:19.154089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:19.154541 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:08:19.154531002 +0000 UTC m=+349.758087642 I0714 23:08:24.050451 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:08:24.050436445 +0000 UTC m=+354.653993095 I0714 23:09:05.793425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:09:05.793462 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-14 23:09:05.793455238 +0000 UTC m=+396.397011868 I0714 23:09:05.794027 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 23:09:05.794011027 +0000 UTC m=+396.397567657 I0714 23:09:05.838206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:09:05.838254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-14 23:09:05.838246251 +0000 UTC m=+396.441802871 I0714 23:09:05.838462 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 23:09:05.838450084 +0000 UTC m=+396.442006704 I0714 23:09:05.846066 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 23:09:05.846046237 +0000 UTC m=+396.449602877 I0714 23:09:05.849527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:09:05.849567 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 23:09:05.849560723 +0000 UTC m=+396.453117343 I0714 23:09:05.865749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:05.865825 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 23:09:05.865818346 +0000 UTC m=+396.469374966 I0714 23:09:05.936903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:05.936986 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 23:09:05.936979135 +0000 UTC m=+396.540535765 I0714 23:09:05.953558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:05.953641 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 23:09:05.953633683 +0000 UTC m=+396.557190303 I0714 23:09:06.236260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:06.263543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7g8dx" condition "Approved" to 2026-07-14 23:09:06.263530549 +0000 UTC m=+396.867087179 I0714 23:09:06.285388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7g8dx" condition "Ready" to 2026-07-14 23:09:06.285377081 +0000 UTC m=+396.888933711 I0714 23:09:06.367325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:06.376462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:09:06.376494 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 23:09:06.376488038 +0000 UTC m=+396.980044658 I0714 23:09:06.376982 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:09:06.376978776 +0000 UTC m=+396.980535396 I0714 23:09:06.422667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:06.423163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:06.461047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:06.493759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dx67v" condition "Approved" to 2026-07-14 23:09:06.493750528 +0000 UTC m=+397.097307148 I0714 23:09:06.509364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dx67v" condition "Ready" to 2026-07-14 23:09:06.50935813 +0000 UTC m=+397.112914750 I0714 23:09:06.578219 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:09:06.578205708 +0000 UTC m=+397.181762328 I0714 23:09:06.602064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:06.602384 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:09:06.602379018 +0000 UTC m=+397.205935638 I0714 23:09:06.629709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:06.679211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:06.983715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sg64p" condition "Approved" to 2026-07-14 23:09:06.983699332 +0000 UTC m=+397.587255962 I0714 23:09:07.089586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sg64p" condition "Ready" to 2026-07-14 23:09:07.089570785 +0000 UTC m=+397.693127435 I0714 23:09:07.524811 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-sg64p" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-c9gcj" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0714 23:09:07.733995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zv56s" condition "Approved" to 2026-07-14 23:09:07.733979168 +0000 UTC m=+398.337535798 I0714 23:09:08.044252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zv56s" condition "Ready" to 2026-07-14 23:09:08.044238966 +0000 UTC m=+398.647795586 I0714 23:09:08.279928 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:09:08.279914548 +0000 UTC m=+398.883471178 I0714 23:09:08.380664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:08.381036 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:09:08.381029271 +0000 UTC m=+398.984585901 I0714 23:09:08.580287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:14.445891 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mls9b-tls" condition "Ready" to 2026-07-14 23:09:14.445847476 +0000 UTC m=+405.049404136 I0714 23:09:14.446340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mls9b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:09:14.446394 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mls9b-tls" condition "Issuing" to 2026-07-14 23:09:14.446382064 +0000 UTC m=+405.049938724 I0714 23:09:14.466842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mls9b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mls9b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:14.466963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mls9b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:09:14.467004 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mls9b-tls" condition "Issuing" to 2026-07-14 23:09:14.46698198 +0000 UTC m=+405.070538600 I0714 23:09:14.847373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mls9b-lmgsr" condition "Approved" to 2026-07-14 23:09:14.847356907 +0000 UTC m=+405.450913557 I0714 23:09:14.869620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mls9b-lmgsr" condition "Ready" to 2026-07-14 23:09:14.86960524 +0000 UTC m=+405.473161860 I0714 23:09:14.910814 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mls9b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:09:14.910798874 +0000 UTC m=+405.514355494 I0714 23:09:14.929013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mls9b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mls9b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:27.577636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 23:09:27.577607709 +0000 UTC m=+418.181164329 I0714 23:09:27.577858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:09:27.577893 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-14 23:09:27.577885243 +0000 UTC m=+418.181441873 I0714 23:09:27.597860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:27.598083 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 23:09:27.598071957 +0000 UTC m=+418.201628607 I0714 23:09:27.965755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:28.003896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rg4kp" condition "Approved" to 2026-07-14 23:09:28.00388503 +0000 UTC m=+418.607441670 I0714 23:09:28.027416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rg4kp" condition "Ready" to 2026-07-14 23:09:28.027406093 +0000 UTC m=+418.630962713 I0714 23:09:28.050685 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:09:28.050672493 +0000 UTC m=+418.654229153 I0714 23:09:28.075804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:09:28.142569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:12:39.449749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:12:39.449819 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-14 23:12:39.449799609 +0000 UTC m=+610.053356239 I0714 23:12:39.449846 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 23:12:39.449837799 +0000 UTC m=+610.053394459 I0714 23:12:39.477039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:12:39.477229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:12:39.477262 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 23:12:39.477254712 +0000 UTC m=+610.080811372 I0714 23:12:39.810969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:12:39.815535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7dpsz" condition "Approved" to 2026-07-14 23:12:39.815518017 +0000 UTC m=+610.419074637 I0714 23:12:39.838154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7dpsz" condition "Ready" to 2026-07-14 23:12:39.838138108 +0000 UTC m=+610.441694738 I0714 23:12:39.867144 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:12:39.867129091 +0000 UTC m=+610.470685721 I0714 23:12:39.889315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:13:17.687227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:13:17.687306 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-14 23:13:17.687296091 +0000 UTC m=+648.290852741 I0714 23:13:17.687587 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-14 23:13:17.687571665 +0000 UTC m=+648.291128295 I0714 23:13:17.712609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:13:17.712836 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-14 23:13:17.712825275 +0000 UTC m=+648.316381925 I0714 23:13:18.013549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:13:18.048467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jmrfl" condition "Approved" to 2026-07-14 23:13:18.048454681 +0000 UTC m=+648.652011301 I0714 23:13:18.066672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jmrfl" condition "Ready" to 2026-07-14 23:13:18.066656311 +0000 UTC m=+648.670212951 I0714 23:13:18.101271 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:13:18.10125794 +0000 UTC m=+648.704814560 I0714 23:13:18.118490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:13:18.119641 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:13:18.119633442 +0000 UTC m=+648.723190062 I0714 23:13:18.145252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:13:18.145470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:13:18.145868 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:13:18.145860785 +0000 UTC m=+648.749417405