I0717 03:39:08.624130 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0717 03:39:08.624345 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0717 03:39:08.629608 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0717 03:39:08.629643 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0717 03:39:08.629659 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0717 03:39:08.630314 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0717 03:39:08.630354 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0717 03:39:08.630486 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0717 03:39:08.633239 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0717 03:39:08.648523 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0717 03:39:08.655964 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0717 03:39:08.658039 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0717 03:39:08.660729 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0717 03:39:08.662389 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0717 03:39:08.662614 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0717 03:39:08.664924 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0717 03:39:08.668601 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0717 03:39:08.668706 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0717 03:39:08.670598 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0717 03:39:08.672486 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0717 03:39:08.674192 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0717 03:39:08.674353 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0717 03:39:08.676431 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0717 03:39:08.678144 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0717 03:39:08.683445 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0717 03:39:08.686968 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0717 03:39:08.687026 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0717 03:39:08.687069 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0717 03:39:08.689893 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0717 03:39:08.692823 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0717 03:39:08.695182 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0717 03:39:08.697116 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0717 03:39:08.698957 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0717 03:39:08.699021 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0717 03:39:08.702806 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.703069 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.703393 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.705596 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.707225 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.720492 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.745609 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.769431 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.786097 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.807589 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:08.828170 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 03:39:25.879675 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-17 03:39:25.879649847 +0000 UTC m=+17.286564847 I0717 03:39:26.575307 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:39:26.575375 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-17 03:39:26.575364263 +0000 UTC m=+17.982279293 I0717 03:39:26.575709 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-17 03:39:26.575701103 +0000 UTC m=+17.982616133 E0717 03:39:26.586793 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 03:39:26.586852 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-17 03:39:26.586841238 +0000 UTC m=+17.993756248 E0717 03:39:26.586921 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 03:39:26.587374 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:26.587482 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:39:26.587540 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-17 03:39:26.587532878 +0000 UTC m=+17.994447878 E0717 03:39:26.598396 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0717 03:39:26.598748 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 03:39:26.598783 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 03:39:26.598814 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0717 03:39:26.632838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-17 03:39:26.632827379 +0000 UTC m=+18.039742389 I0717 03:39:26.651364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-17 03:39:26.651352474 +0000 UTC m=+18.058267484 I0717 03:39:26.673438 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:39:26.673426597 +0000 UTC m=+18.080341607 I0717 03:39:26.685829 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:26.686107 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:39:26.686098697 +0000 UTC m=+18.093013707 I0717 03:39:26.691798 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:26.700639 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:31.599047 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:39:31.599032283 +0000 UTC m=+23.005947313 I0717 03:39:53.507832 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:39:53.507892 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-17 03:39:53.507884325 +0000 UTC m=+44.914799335 I0717 03:39:53.508412 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 03:39:53.508406498 +0000 UTC m=+44.915321508 I0717 03:39:53.534150 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:53.535447 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:39:53.534849 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-17 03:39:53.53482223 +0000 UTC m=+44.941737280 I0717 03:39:53.537756 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-17 03:39:53.537744538 +0000 UTC m=+44.944659558 I0717 03:39:53.869071 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:53.888569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-17 03:39:53.888557777 +0000 UTC m=+45.295472777 I0717 03:39:53.916641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-17 03:39:53.916626892 +0000 UTC m=+45.323541902 I0717 03:39:53.948956 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:39:53.948944309 +0000 UTC m=+45.355859309 I0717 03:39:53.962190 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:53.963011 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:39:53.962988642 +0000 UTC m=+45.369903652 I0717 03:39:53.972474 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:53.981399 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:39:53.981889 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:39:53.981881873 +0000 UTC m=+45.388796883 I0717 03:43:58.968536 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:43:58.968587 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-07-17 03:43:58.968580667 +0000 UTC m=+290.375495677 I0717 03:43:58.968580 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-07-17 03:43:58.968567247 +0000 UTC m=+290.375482257 I0717 03:43:58.978568 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:43:58.978836 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-07-17 03:43:58.978825731 +0000 UTC m=+290.385740761 I0717 03:43:59.132097 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:43:59.167619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-1" condition "Approved" to 2026-07-17 03:43:59.167595334 +0000 UTC m=+290.574510364 I0717 03:43:59.186477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-1" condition "Ready" to 2026-07-17 03:43:59.186462788 +0000 UTC m=+290.593377798 I0717 03:43:59.214030 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:43:59.214019112 +0000 UTC m=+290.620934122 I0717 03:43:59.227235 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:43:59.267595 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:02.247704 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:45:02.247758 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-17 03:45:02.247743826 +0000 UTC m=+353.654658886 I0717 03:45:02.247867 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 03:45:02.247858348 +0000 UTC m=+353.654773358 I0717 03:45:02.258439 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:02.258551 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:45:02.258589 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 03:45:02.258582338 +0000 UTC m=+353.665497348 E0717 03:45:02.259024 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 03:45:02.259087 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-17 03:45:02.259079255 +0000 UTC m=+353.665994265 E0717 03:45:02.259113 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 03:45:02.268033 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0717 03:45:02.268821 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 03:45:02.269018 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 03:45:02.269191 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0717 03:45:02.290146 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:02.294179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-17 03:45:02.294162844 +0000 UTC m=+353.701077844 I0717 03:45:02.308924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-17 03:45:02.308905308 +0000 UTC m=+353.715820308 I0717 03:45:02.328383 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:02.328354513 +0000 UTC m=+353.735269513 I0717 03:45:02.341181 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:02.341620 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:02.341612546 +0000 UTC m=+353.748527556 I0717 03:45:02.356075 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:07.268433 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:07.268419983 +0000 UTC m=+358.675335003 I0717 03:45:47.578218 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:45:47.579647 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-17 03:45:47.57962137 +0000 UTC m=+398.986536410 I0717 03:45:47.579913 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:45:47.594781 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-17 03:45:47.594753042 +0000 UTC m=+399.001668062 I0717 03:45:47.579968 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-17 03:45:47.579964834 +0000 UTC m=+398.986879834 I0717 03:45:47.580052 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:45:47.580105 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-17 03:45:47.580101566 +0000 UTC m=+398.987016586 I0717 03:45:47.586732 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-17 03:45:47.58671783 +0000 UTC m=+398.993632840 I0717 03:45:47.598763 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 03:45:47.598747783 +0000 UTC m=+399.005662783 I0717 03:45:47.625444 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:47.627647 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-17 03:45:47.627637771 +0000 UTC m=+399.034552771 I0717 03:45:47.627493 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:47.628096 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-17 03:45:47.628077737 +0000 UTC m=+399.034992777 I0717 03:45:47.628756 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:47.629257 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:45:47.629342 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 03:45:47.629289633 +0000 UTC m=+399.036204623 I0717 03:45:47.773763 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:47.784248 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:47.803349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-17 03:45:47.803335508 +0000 UTC m=+399.210250518 I0717 03:45:47.822254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-17 03:45:47.822241158 +0000 UTC m=+399.229156168 I0717 03:45:47.823548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-17 03:45:47.823527614 +0000 UTC m=+399.230442624 I0717 03:45:47.831389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-17 03:45:47.831373165 +0000 UTC m=+399.238288175 I0717 03:45:47.842279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-17 03:45:47.842262883 +0000 UTC m=+399.249177873 I0717 03:45:47.845709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-17 03:45:47.845690077 +0000 UTC m=+399.252605107 I0717 03:45:48.015462 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:48.015444097 +0000 UTC m=+399.422359087 I0717 03:45:48.172234 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:48.172215791 +0000 UTC m=+399.579130791 I0717 03:45:48.313909 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:48.374767 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:48.374751798 +0000 UTC m=+399.781666808 I0717 03:45:48.461250 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:48.461845 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:48.461837905 +0000 UTC m=+399.868752915 I0717 03:45:48.663352 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:48.664421 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:48.664408872 +0000 UTC m=+400.071323882 I0717 03:45:49.114427 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:49.213844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:49.264698 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:49.511192 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:55.576739 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls" condition "Ready" to 2026-07-17 03:45:55.576686948 +0000 UTC m=+406.983601958 I0717 03:45:55.576763 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:45:55.576931 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls" condition "Issuing" to 2026-07-17 03:45:55.57692388 +0000 UTC m=+406.983838870 I0717 03:45:55.583991 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:55.584036 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls" condition "Ready" to 2026-07-17 03:45:55.5840328 +0000 UTC m=+406.990947800 I0717 03:45:55.709665 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:45:55.737990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls-1" condition "Approved" to 2026-07-17 03:45:55.737977271 +0000 UTC m=+407.144892281 I0717 03:45:55.759488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls-1" condition "Ready" to 2026-07-17 03:45:55.759477174 +0000 UTC m=+407.166392184 I0717 03:45:55.827924 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:45:55.82791401 +0000 UTC m=+407.234829000 I0717 03:45:55.858910 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cwgcd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:46:06.987385 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-17 03:46:06.986865439 +0000 UTC m=+418.393780439 I0717 03:46:06.987570 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:46:06.987654 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-17 03:46:06.987616598 +0000 UTC m=+418.394531628 I0717 03:46:07.000482 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:46:07.000682 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:46:07.000752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-17 03:46:07.000744794 +0000 UTC m=+418.407659824 I0717 03:46:07.345778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-17 03:46:07.345763729 +0000 UTC m=+418.752678739 I0717 03:46:07.362165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-17 03:46:07.362158046 +0000 UTC m=+418.769073056 I0717 03:46:07.392274 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:46:07.392258415 +0000 UTC m=+418.799173425 I0717 03:46:07.401628 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:46:07.402076 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:46:07.402068248 +0000 UTC m=+418.808983258 I0717 03:46:07.424490 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:49:24.274199 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-17 03:49:24.274179916 +0000 UTC m=+615.681094926 I0717 03:49:24.274250 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:49:24.274560 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-17 03:49:24.274546714 +0000 UTC m=+615.681461754 I0717 03:49:24.284462 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:49:24.284558 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:49:24.284585 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-17 03:49:24.284574742 +0000 UTC m=+615.691489772 I0717 03:49:24.750995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-17 03:49:24.750982123 +0000 UTC m=+616.157897133 I0717 03:49:24.766581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-17 03:49:24.766571513 +0000 UTC m=+616.173486513 I0717 03:49:24.790920 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:49:24.790910349 +0000 UTC m=+616.197825349 I0717 03:49:24.806274 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:49:24.806773 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:49:24.806764814 +0000 UTC m=+616.213679844 I0717 03:49:24.819085 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:50:06.530941 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-17 03:50:06.530928214 +0000 UTC m=+657.937843224 I0717 03:50:06.531915 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:50:06.531966 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 03:50:06.531958056 +0000 UTC m=+657.938873066 I0717 03:50:06.540363 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:50:06.540402 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 03:50:06.540414 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 03:50:06.540409354 +0000 UTC m=+657.947324354 I0717 03:50:06.861701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-17 03:50:06.861686895 +0000 UTC m=+658.268601895 I0717 03:50:06.879014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-17 03:50:06.878995938 +0000 UTC m=+658.285910958 I0717 03:50:06.900491 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:50:06.900461513 +0000 UTC m=+658.307376513 I0717 03:50:06.914240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:50:06.915485 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 03:50:06.915474877 +0000 UTC m=+658.322389877 I0717 03:50:06.930606 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 03:50:06.941746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"