I0722 22:01:36.747472 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0722 22:01:36.747581 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0722 22:01:36.747702 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0722 22:01:36.750887 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0722 22:01:36.751446 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0722 22:01:36.751494 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0722 22:01:36.751455 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0722 22:01:36.756348 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0722 22:01:36.771958 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0722 22:01:36.772193 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0722 22:01:36.777225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0722 22:01:36.782815 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0722 22:01:36.782878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0722 22:01:36.785211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0722 22:01:36.787019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0722 22:01:36.788995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0722 22:01:36.790560 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0722 22:01:36.790631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0722 22:01:36.792370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0722 22:01:36.794103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0722 22:01:36.802695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0722 22:01:36.805929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0722 22:01:36.807657 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0722 22:01:36.809400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0722 22:01:36.811376 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0722 22:01:36.814028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0722 22:01:36.815396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0722 22:01:36.816823 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0722 22:01:36.816935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0722 22:01:36.821961 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0722 22:01:36.822032 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0722 22:01:36.825097 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0722 22:01:36.825119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0722 22:01:36.828616 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.828873 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.829037 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.841794 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.861862 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.879230 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.910814 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.913778 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.929642 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:36.950126 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0722 22:01:57.125245 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-22 22:01:57.125213746 +0000 UTC m=+20.414820193 I0722 22:01:57.862629 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-22 22:01:57.862616916 +0000 UTC m=+21.152223343 I0722 22:01:57.863449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:01:57.863517 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-22 22:01:57.863511667 +0000 UTC m=+21.153118094 E0722 22:01:57.876845 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0722 22:01:57.877972 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-22 22:01:57.877964258 +0000 UTC m=+21.167570685 E0722 22:01:57.878033 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0722 22:01:57.878286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:01:57.878584 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:01:57.878619 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-22 22:01:57.878608594 +0000 UTC m=+21.168215051 E0722 22:01:57.893096 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0722 22:01:57.894821 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0722 22:01:57.895487 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0722 22:01:57.896077 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0722 22:01:57.923075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v94xn" condition "Approved" to 2026-07-22 22:01:57.923064493 +0000 UTC m=+21.212670930 I0722 22:01:57.923684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:01:57.935398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v94xn" condition "Ready" to 2026-07-22 22:01:57.935387982 +0000 UTC m=+21.224994409 I0722 22:01:57.954829 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:01:57.954818053 +0000 UTC m=+21.244424480 I0722 22:01:57.972755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:01:57.973231 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:01:57.973221679 +0000 UTC m=+21.262828136 I0722 22:01:57.990138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:01:57.992735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:01:57.993174 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:01:57.993141043 +0000 UTC m=+21.282747490 I0722 22:02:02.894508 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:02:02.894494232 +0000 UTC m=+26.184100679 I0722 22:02:25.305010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:02:25.305084 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-22 22:02:25.30507072 +0000 UTC m=+48.594677147 I0722 22:02:25.305127 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-22 22:02:25.304875935 +0000 UTC m=+48.594482362 I0722 22:02:25.323907 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-22 22:02:25.323890487 +0000 UTC m=+48.613496894 I0722 22:02:25.355872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:02:25.355939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:02:25.355958 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-22 22:02:25.355952103 +0000 UTC m=+48.645558520 I0722 22:02:25.863660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:02:25.878989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9cl44" condition "Approved" to 2026-07-22 22:02:25.878978287 +0000 UTC m=+49.168584714 I0722 22:02:25.910272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9cl44" condition "Ready" to 2026-07-22 22:02:25.910258685 +0000 UTC m=+49.199865112 I0722 22:02:25.940280 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:02:25.940264052 +0000 UTC m=+49.229870499 I0722 22:02:25.990766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:02:25.990978 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:02:25.990973582 +0000 UTC m=+49.280579989 I0722 22:02:25.996825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:02:26.056368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:06:45.829364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:06:45.829435 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-07-22 22:06:45.829426219 +0000 UTC m=+309.119032666 I0722 22:06:45.829432 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-07-22 22:06:45.829382758 +0000 UTC m=+309.118989215 I0722 22:06:45.848295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:06:45.848357 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-07-22 22:06:45.84834851 +0000 UTC m=+309.137954937 I0722 22:06:46.248093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:06:46.276186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-hj9bh" condition "Approved" to 2026-07-22 22:06:46.276171397 +0000 UTC m=+309.565777854 I0722 22:06:46.304563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-hj9bh" condition "Ready" to 2026-07-22 22:06:46.304549768 +0000 UTC m=+309.594156225 I0722 22:06:46.329545 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:06:46.329534056 +0000 UTC m=+309.619140483 I0722 22:06:46.350205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:07:51.424891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:07:51.424980 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-22 22:07:51.424936555 +0000 UTC m=+374.714543012 I0722 22:07:51.425886 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-22 22:07:51.424885364 +0000 UTC m=+374.714491811 E0722 22:07:51.440308 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0722 22:07:51.440348 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-22 22:07:51.440338653 +0000 UTC m=+374.729945070 E0722 22:07:51.440934 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0722 22:07:51.443290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:07:51.443369 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-22 22:07:51.443364727 +0000 UTC m=+374.732971134 E0722 22:07:51.450482 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0722 22:07:51.450603 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0722 22:07:51.450644 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0722 22:07:51.450741 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0722 22:07:51.459590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:07:51.483654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ggzqg" condition "Approved" to 2026-07-22 22:07:51.483619792 +0000 UTC m=+374.773226219 I0722 22:07:51.496108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ggzqg" condition "Ready" to 2026-07-22 22:07:51.496094888 +0000 UTC m=+374.785701315 I0722 22:07:51.519267 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:07:51.51925231 +0000 UTC m=+374.808858727 I0722 22:07:51.535668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:07:51.535928 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:07:51.535921394 +0000 UTC m=+374.825527821 I0722 22:07:51.563015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:07:51.563394 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:07:51.563386338 +0000 UTC m=+374.852992765 I0722 22:07:56.451495 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:07:56.451480793 +0000 UTC m=+379.741087240 I0722 22:08:37.208519 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-22 22:08:37.208470913 +0000 UTC m=+420.498077340 I0722 22:08:37.208611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:08:37.208656 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-22 22:08:37.208645837 +0000 UTC m=+420.498252284 I0722 22:08:37.212075 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-22 22:08:37.21206277 +0000 UTC m=+420.501669187 I0722 22:08:37.212374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:08:37.212399 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-22 22:08:37.212394996 +0000 UTC m=+420.502001413 I0722 22:08:37.229524 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-22 22:08:37.229512071 +0000 UTC m=+420.519118488 I0722 22:08:37.233390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:08:37.233423 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-22 22:08:37.233416454 +0000 UTC m=+420.523022871 I0722 22:08:37.258928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:37.259002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:08:37.259028 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-22 22:08:37.259020609 +0000 UTC m=+420.548627046 I0722 22:08:37.259620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:37.259717 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-22 22:08:37.259708924 +0000 UTC m=+420.549315351 I0722 22:08:37.272305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:37.272389 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-22 22:08:37.272381454 +0000 UTC m=+420.561987871 I0722 22:08:37.431222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:37.532425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-stnqf" condition "Approved" to 2026-07-22 22:08:37.532416199 +0000 UTC m=+420.822022616 I0722 22:08:37.549434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:37.572576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-stnqf" condition "Ready" to 2026-07-22 22:08:37.572569155 +0000 UTC m=+420.862175562 I0722 22:08:37.623385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-h9x5j" condition "Approved" to 2026-07-22 22:08:37.623376346 +0000 UTC m=+420.912982753 I0722 22:08:37.630404 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:08:37.630396645 +0000 UTC m=+420.920003062 I0722 22:08:37.645202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-h9x5j" condition "Ready" to 2026-07-22 22:08:37.645191671 +0000 UTC m=+420.934798078 I0722 22:08:37.664571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:37.687752 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:08:37.687736677 +0000 UTC m=+420.977343134 I0722 22:08:37.735621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:37.735937 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:08:37.735931442 +0000 UTC m=+421.025537859 I0722 22:08:38.067917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:38.323133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gvq9s" condition "Approved" to 2026-07-22 22:08:38.323118994 +0000 UTC m=+421.612725421 I0722 22:08:38.479747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gvq9s" condition "Ready" to 2026-07-22 22:08:38.479734938 +0000 UTC m=+421.769341355 I0722 22:08:38.914231 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-gvq9s" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-8d7g4" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0722 22:08:39.097881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wchrq" condition "Approved" to 2026-07-22 22:08:39.097860748 +0000 UTC m=+422.387467205 I0722 22:08:39.280160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wchrq" condition "Ready" to 2026-07-22 22:08:39.280141708 +0000 UTC m=+422.569748175 I0722 22:08:39.617578 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:08:39.617563263 +0000 UTC m=+422.907169690 I0722 22:08:39.721082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:40.015868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:45.311479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n24h4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:08:45.311536 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n24h4-tls" condition "Issuing" to 2026-07-22 22:08:45.311510863 +0000 UTC m=+428.601117320 I0722 22:08:45.311714 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n24h4-tls" condition "Ready" to 2026-07-22 22:08:45.311699137 +0000 UTC m=+428.601305574 I0722 22:08:45.330449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n24h4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n24h4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:45.330550 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n24h4-tls" condition "Ready" to 2026-07-22 22:08:45.330541098 +0000 UTC m=+428.620147525 I0722 22:08:45.778834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n24h4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n24h4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:45.827329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n24h4-cgvkz" condition "Approved" to 2026-07-22 22:08:45.827319796 +0000 UTC m=+429.116926213 I0722 22:08:45.867580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n24h4-cgvkz" condition "Ready" to 2026-07-22 22:08:45.867568184 +0000 UTC m=+429.157174611 I0722 22:08:45.901501 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n24h4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:08:45.901489016 +0000 UTC m=+429.191095433 I0722 22:08:45.921986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n24h4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n24h4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:58.110885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:08:58.110979 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-22 22:08:58.110970079 +0000 UTC m=+441.400576516 I0722 22:08:58.111374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-22 22:08:58.111369778 +0000 UTC m=+441.400976195 I0722 22:08:58.124040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:58.124214 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-22 22:08:58.124204331 +0000 UTC m=+441.413810788 I0722 22:08:58.344216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:58.384271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tljzl" condition "Approved" to 2026-07-22 22:08:58.384256741 +0000 UTC m=+441.673863168 I0722 22:08:58.413120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tljzl" condition "Ready" to 2026-07-22 22:08:58.413110516 +0000 UTC m=+441.702716923 I0722 22:08:58.458879 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:08:58.458845919 +0000 UTC m=+441.748452346 I0722 22:08:58.480068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:08:58.480377 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:08:58.480371018 +0000 UTC m=+441.769977425 I0722 22:08:58.507940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:16.049446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:12:16.050086 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-22 22:12:16.049793626 +0000 UTC m=+639.339400073 I0722 22:12:16.050124 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-22 22:12:16.0495097 +0000 UTC m=+639.339116157 I0722 22:12:16.067753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:16.067848 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-22 22:12:16.067839232 +0000 UTC m=+639.357445649 I0722 22:12:16.304910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:16.341754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wxdr4" condition "Approved" to 2026-07-22 22:12:16.341741972 +0000 UTC m=+639.631348399 I0722 22:12:16.401690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wxdr4" condition "Ready" to 2026-07-22 22:12:16.401681703 +0000 UTC m=+639.691288130 I0722 22:12:16.444011 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:12:16.443997786 +0000 UTC m=+639.733604203 I0722 22:12:16.493788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:57.332449 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-22 22:12:57.332436622 +0000 UTC m=+680.622043039 I0722 22:12:57.332485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0722 22:12:57.332808 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-22 22:12:57.332713728 +0000 UTC m=+680.622320175 I0722 22:12:57.360207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:57.360278 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-22 22:12:57.360267577 +0000 UTC m=+680.649874044 I0722 22:12:57.546549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:57.579895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5jnth" condition "Approved" to 2026-07-22 22:12:57.579883378 +0000 UTC m=+680.869489805 I0722 22:12:57.600382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5jnth" condition "Ready" to 2026-07-22 22:12:57.600372435 +0000 UTC m=+680.889978842 I0722 22:12:57.622168 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:12:57.622153861 +0000 UTC m=+680.911760288 I0722 22:12:57.657230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:57.657554 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:12:57.657546788 +0000 UTC m=+680.947153205 I0722 22:12:57.663770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:57.673134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0722 22:12:57.673333 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-22 22:12:57.673326134 +0000 UTC m=+680.962932551