I0717 18:02:48.604171 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0717 18:02:48.604262 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0717 18:02:48.604339 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0717 18:02:48.608398 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0717 18:02:48.608864 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0717 18:02:48.608998 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0717 18:02:48.609015 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0717 18:02:48.611561 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0717 18:02:48.625969 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0717 18:02:48.626369 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0717 18:02:48.626432 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0717 18:02:48.630381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0717 18:02:48.636208 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0717 18:02:48.636463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0717 18:02:48.640347 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0717 18:02:48.642878 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0717 18:02:48.642916 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0717 18:02:48.645451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0717 18:02:48.647806 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0717 18:02:48.649820 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0717 18:02:48.651769 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0717 18:02:48.657082 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0717 18:02:48.659783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0717 18:02:48.662291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0717 18:02:48.664964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0717 18:02:48.667658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0717 18:02:48.669975 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0717 18:02:48.670049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0717 18:02:48.671874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0717 18:02:48.673756 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0717 18:02:48.678497 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0717 18:02:48.684399 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0717 18:02:48.684517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0717 18:02:48.688115 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.688130 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.689287 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.710734 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.725228 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.738765 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.763715 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.778367 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.779980 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:02:48.800512 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0717 18:03:00.855824 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-17 18:03:00.855804723 +0000 UTC m=+12.295942134 I0717 18:03:01.661604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:03:01.661666 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-17 18:03:01.661657667 +0000 UTC m=+13.101795079 I0717 18:03:01.661796 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-17 18:03:01.661780541 +0000 UTC m=+13.101918022 E0717 18:03:01.681027 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 18:03:01.681214 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-17 18:03:01.681205071 +0000 UTC m=+13.121342482 E0717 18:03:01.681267 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 18:03:01.682178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:03:01.682269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:03:01.682290 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-17 18:03:01.682284866 +0000 UTC m=+13.122422277 E0717 18:03:01.692064 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0717 18:03:01.692237 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:03:01.692273 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:03:01.692404 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0717 18:03:01.728173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qn8nb" condition "Approved" to 2026-07-17 18:03:01.728157294 +0000 UTC m=+13.168294695 I0717 18:03:01.742768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qn8nb" condition "Ready" to 2026-07-17 18:03:01.742757118 +0000 UTC m=+13.182894519 I0717 18:03:01.771164 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:03:01.771150269 +0000 UTC m=+13.211287680 I0717 18:03:01.790988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:03:01.791305 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:03:01.791295696 +0000 UTC m=+13.231433107 I0717 18:03:01.808470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:03:06.692962 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:03:06.692944321 +0000 UTC m=+18.133081762 I0717 18:03:33.998424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:03:33.998503 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-17 18:03:33.998494032 +0000 UTC m=+45.438631443 I0717 18:03:33.999109 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 18:03:33.999095133 +0000 UTC m=+45.439232544 I0717 18:03:34.032170 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-17 18:03:34.032149911 +0000 UTC m=+45.472287322 I0717 18:03:34.041691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:03:34.041773 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 18:03:34.041765917 +0000 UTC m=+45.481903318 I0717 18:03:34.426707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:03:34.470875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g2whw" condition "Approved" to 2026-07-17 18:03:34.470866209 +0000 UTC m=+45.911003600 I0717 18:03:34.504429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g2whw" condition "Ready" to 2026-07-17 18:03:34.504419886 +0000 UTC m=+45.944557287 I0717 18:03:34.535287 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:03:34.535276333 +0000 UTC m=+45.975413744 I0717 18:03:34.567960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:03:34.568355 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:03:34.568345572 +0000 UTC m=+46.008482983 I0717 18:03:34.569578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:03:34.597430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:03:34.597631 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:03:34.597624131 +0000 UTC m=+46.037761542 I0717 18:03:34.599599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:07:32.405810 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-07-17 18:07:32.405753807 +0000 UTC m=+283.845891248 I0717 18:07:32.405840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:07:32.405873 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-07-17 18:07:32.40586509 +0000 UTC m=+283.846002531 I0717 18:07:32.420720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:07:32.420783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:07:32.420794 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-07-17 18:07:32.420790791 +0000 UTC m=+283.860928192 I0717 18:07:32.708347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-75ws7" condition "Approved" to 2026-07-17 18:07:32.708336861 +0000 UTC m=+284.148474272 I0717 18:07:32.738454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-75ws7" condition "Ready" to 2026-07-17 18:07:32.738442318 +0000 UTC m=+284.178579729 I0717 18:07:32.768774 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:07:32.768755011 +0000 UTC m=+284.208892442 I0717 18:07:32.784065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:07:32.784341 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:07:32.784335919 +0000 UTC m=+284.224473320 I0717 18:07:32.806960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:08:36.367467 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-17 18:08:36.367406492 +0000 UTC m=+347.807543933 I0717 18:08:36.367581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:08:36.367773 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 18:08:36.367762319 +0000 UTC m=+347.807899740 E0717 18:08:36.379374 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 18:08:36.379414 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-17 18:08:36.379408331 +0000 UTC m=+347.819545752 E0717 18:08:36.379491 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 18:08:36.385512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:08:36.385624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:08:36.385650 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 18:08:36.385643066 +0000 UTC m=+347.825780477 E0717 18:08:36.392383 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0717 18:08:36.392450 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:08:36.392473 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:08:36.392535 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0717 18:08:36.428428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mb5kz" condition "Approved" to 2026-07-17 18:08:36.428410991 +0000 UTC m=+347.868548422 I0717 18:08:36.443310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mb5kz" condition "Ready" to 2026-07-17 18:08:36.443299364 +0000 UTC m=+347.883436765 I0717 18:08:36.463832 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:08:36.463820148 +0000 UTC m=+347.903957559 I0717 18:08:36.478772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:08:41.393282 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:08:41.393273607 +0000 UTC m=+352.833411008 I0717 18:09:25.748275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:09:25.750829 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-17 18:09:25.750816917 +0000 UTC m=+397.190954328 I0717 18:09:25.748315 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-17 18:09:25.748304327 +0000 UTC m=+397.188441728 I0717 18:09:25.748491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:09:25.751466 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 18:09:25.751460129 +0000 UTC m=+397.191597540 I0717 18:09:25.748704 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-17 18:09:25.748700405 +0000 UTC m=+397.188837806 I0717 18:09:25.748720 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-17 18:09:25.748718145 +0000 UTC m=+397.188855546 I0717 18:09:25.748767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:09:25.753457 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-17 18:09:25.753435109 +0000 UTC m=+397.193572510 I0717 18:09:25.791056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:25.794198 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-17 18:09:25.794187174 +0000 UTC m=+397.234324585 I0717 18:09:25.804612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:25.804694 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-17 18:09:25.804685322 +0000 UTC m=+397.244822733 I0717 18:09:25.805070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:25.805204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:09:25.805227 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-17 18:09:25.805223032 +0000 UTC m=+397.245360453 I0717 18:09:26.085864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dlq4d" condition "Approved" to 2026-07-17 18:09:26.085849177 +0000 UTC m=+397.525986578 I0717 18:09:26.108471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dlq4d" condition "Ready" to 2026-07-17 18:09:26.108458763 +0000 UTC m=+397.548596184 I0717 18:09:26.112783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:26.144003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:26.150914 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:26.15090763 +0000 UTC m=+397.591045031 I0717 18:09:26.168462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dch45" condition "Approved" to 2026-07-17 18:09:26.168452746 +0000 UTC m=+397.608590137 I0717 18:09:26.175967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:26.195388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dch45" condition "Ready" to 2026-07-17 18:09:26.195378958 +0000 UTC m=+397.635516359 I0717 18:09:26.208437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-scbdd" condition "Approved" to 2026-07-17 18:09:26.208424995 +0000 UTC m=+397.648562396 I0717 18:09:26.245897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-scbdd" condition "Ready" to 2026-07-17 18:09:26.245886625 +0000 UTC m=+397.686024026 I0717 18:09:26.625233 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:26.62521774 +0000 UTC m=+398.065355141 I0717 18:09:26.908956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:26.909231 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:26.909226295 +0000 UTC m=+398.349363696 I0717 18:09:26.936262 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:26.936250387 +0000 UTC m=+398.376387788 I0717 18:09:27.176757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:27.177101 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:27.177084634 +0000 UTC m=+398.617222045 I0717 18:09:27.227530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:27.477137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:34.073286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:09:34.073320 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" condition "Issuing" to 2026-07-17 18:09:34.07331246 +0000 UTC m=+405.513449871 I0717 18:09:34.073411 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" condition "Ready" to 2026-07-17 18:09:34.073387662 +0000 UTC m=+405.513525063 I0717 18:09:34.093239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:34.093308 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" condition "Ready" to 2026-07-17 18:09:34.09330113 +0000 UTC m=+405.533438531 I0717 18:09:34.218014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:34.252257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-b6x9d-8rwb2" condition "Approved" to 2026-07-17 18:09:34.252234138 +0000 UTC m=+405.692371539 I0717 18:09:34.275151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-b6x9d-8rwb2" condition "Ready" to 2026-07-17 18:09:34.275141704 +0000 UTC m=+405.715279105 I0717 18:09:34.315419 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:34.315391388 +0000 UTC m=+405.755528789 I0717 18:09:34.340974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:34.342645 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:34.34263461 +0000 UTC m=+405.782772021 I0717 18:09:34.363196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b6x9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:46.149039 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-17 18:09:46.14902419 +0000 UTC m=+417.589161601 I0717 18:09:46.149491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:09:46.150136 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-17 18:09:46.150128171 +0000 UTC m=+417.590265582 I0717 18:09:46.172192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:46.172269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:09:46.172291 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-17 18:09:46.172285915 +0000 UTC m=+417.612423316 I0717 18:09:46.384864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:46.387387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dvs4h" condition "Approved" to 2026-07-17 18:09:46.387374676 +0000 UTC m=+417.827512087 I0717 18:09:46.411399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dvs4h" condition "Ready" to 2026-07-17 18:09:46.411385145 +0000 UTC m=+417.851522556 I0717 18:09:46.438893 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:46.438877712 +0000 UTC m=+417.879015123 I0717 18:09:46.458109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:13:03.454368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:13:03.454522 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-17 18:13:03.45451155 +0000 UTC m=+614.894648961 I0717 18:13:03.454638 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-17 18:13:03.454627522 +0000 UTC m=+614.894764953 I0717 18:13:03.471994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:13:03.472041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:13:03.472054 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-17 18:13:03.472049669 +0000 UTC m=+614.912187070 I0717 18:13:03.896769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8mpc8" condition "Approved" to 2026-07-17 18:13:03.896743635 +0000 UTC m=+615.336881046 I0717 18:13:03.911697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8mpc8" condition "Ready" to 2026-07-17 18:13:03.911677972 +0000 UTC m=+615.351815383 I0717 18:13:03.958718 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:13:03.958697327 +0000 UTC m=+615.398834758 I0717 18:13:03.977483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:13:03.977924 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:13:03.977914913 +0000 UTC m=+615.418052314 I0717 18:13:03.998737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:13:45.800266 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-17 18:13:45.80025167 +0000 UTC m=+657.240389071 I0717 18:13:45.800653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:13:45.800690 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 18:13:45.800686607 +0000 UTC m=+657.240824008 I0717 18:13:45.814353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:13:45.814531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:13:45.814591 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 18:13:45.814582283 +0000 UTC m=+657.254719694 I0717 18:13:46.040686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:13:46.051075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fkmfl" condition "Approved" to 2026-07-17 18:13:46.051063081 +0000 UTC m=+657.491200492 I0717 18:13:46.067686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fkmfl" condition "Ready" to 2026-07-17 18:13:46.067676531 +0000 UTC m=+657.507813922 I0717 18:13:46.098740 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:13:46.098727076 +0000 UTC m=+657.538864497 I0717 18:13:46.122527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:13:46.122891 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:13:46.122883679 +0000 UTC m=+657.563021080 I0717 18:13:46.143084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"