I0728 14:06:19.029874 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0728 14:06:19.029972 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0728 14:06:19.032262 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0728 14:06:19.032279 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0728 14:06:19.032285 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0728 14:06:19.032554 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0728 14:06:19.032617 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0728 14:06:19.032729 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0728 14:06:19.034407 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0728 14:06:19.050107 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0728 14:06:19.054383 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0728 14:06:19.058773 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0728 14:06:19.061197 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0728 14:06:19.061223 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0728 14:06:19.061238 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0728 14:06:19.063601 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0728 14:06:19.063628 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0728 14:06:19.065690 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0728 14:06:19.067432 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0728 14:06:19.069289 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0728 14:06:19.074753 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0728 14:06:19.078510 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0728 14:06:19.081488 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0728 14:06:19.083194 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0728 14:06:19.085004 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0728 14:06:19.087173 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0728 14:06:19.087207 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0728 14:06:19.089013 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0728 14:06:19.089173 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0728 14:06:19.093886 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0728 14:06:19.097020 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0728 14:06:19.097163 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0728 14:06:19.099760 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0728 14:06:19.102474 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0728 14:06:19.105345 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.105569 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.105622 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.105585 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.105781 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.126257 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.155575 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.170688 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.187004 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.202907 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:19.224776 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:20.652393 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 14:06:33.671205 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-28 14:06:33.671171019 +0000 UTC m=+14.668395205 I0728 14:06:34.497697 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:06:34.497725 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 14:06:34.497716938 +0000 UTC m=+15.494941104 I0728 14:06:34.497735 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 14:06:34.497727068 +0000 UTC m=+15.494951264 E0728 14:06:34.517166 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 14:06:34.517345 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:34.517417 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 14:06:34.517411404 +0000 UTC m=+15.514635570 I0728 14:06:34.517276 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-28 14:06:34.517203037 +0000 UTC m=+15.514427183 E0728 14:06:34.517600 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:06:34.528091 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0728 14:06:34.528417 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:06:34.528463 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:06:34.528586 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0728 14:06:34.535281 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:34.568606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-28 14:06:34.568587146 +0000 UTC m=+15.565811312 I0728 14:06:34.591140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-28 14:06:34.591119899 +0000 UTC m=+15.588344085 I0728 14:06:34.613736 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:06:34.613719604 +0000 UTC m=+15.610943800 I0728 14:06:34.630550 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:34.630812 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:06:34.630802072 +0000 UTC m=+15.628026238 I0728 14:06:34.646630 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:06:39.528730 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:06:39.528709707 +0000 UTC m=+20.525933863 I0728 14:07:04.887306 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 14:07:04.887243966 +0000 UTC m=+45.884468152 I0728 14:07:04.887660 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:07:04.887789 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 14:07:04.887775304 +0000 UTC m=+45.884999500 I0728 14:07:04.970001 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:07:04.970180 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:07:04.970373 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 14:07:04.97033089 +0000 UTC m=+45.967555076 I0728 14:07:04.970455 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-28 14:07:04.970419513 +0000 UTC m=+45.967643699 I0728 14:07:05.317473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-28 14:07:05.317454021 +0000 UTC m=+46.314678207 I0728 14:07:05.405486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-28 14:07:05.405472304 +0000 UTC m=+46.402696480 I0728 14:07:05.498094 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:07:05.498069052 +0000 UTC m=+46.495293238 I0728 14:07:05.525621 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:07:05.559435 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:07:05.571817 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:11:21.293382 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:11:21.293446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-07-28 14:11:21.293430098 +0000 UTC m=+302.290654264 I0728 14:11:21.293662 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-07-28 14:11:21.293650662 +0000 UTC m=+302.290874818 I0728 14:11:21.302796 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:11:21.302898 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:11:21.302924 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-07-28 14:11:21.302918125 +0000 UTC m=+302.300142301 I0728 14:11:21.616232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-1" condition "Approved" to 2026-07-28 14:11:21.616220835 +0000 UTC m=+302.613445001 I0728 14:11:21.630613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-1" condition "Ready" to 2026-07-28 14:11:21.630602723 +0000 UTC m=+302.627826889 I0728 14:11:21.650064 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:11:21.650055176 +0000 UTC m=+302.647279332 I0728 14:11:21.659685 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:11:21.660225 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:11:21.660217217 +0000 UTC m=+302.657441383 I0728 14:11:21.672176 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:31.063837 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 14:12:31.06380404 +0000 UTC m=+372.061028236 I0728 14:12:31.064433 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:12:31.064495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 14:12:31.064486106 +0000 UTC m=+372.061710292 I0728 14:12:31.080032 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:31.080206 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:12:31.080251 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 14:12:31.080225118 +0000 UTC m=+372.077449284 E0728 14:12:31.080599 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 14:12:31.080651 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-28 14:12:31.080647138 +0000 UTC m=+372.077871304 E0728 14:12:31.080701 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:12:31.091838 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0728 14:12:31.091959 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:12:31.091988 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:12:31.092020 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0728 14:12:31.106994 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:31.115291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-28 14:12:31.115279227 +0000 UTC m=+372.112503393 I0728 14:12:31.130992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-28 14:12:31.130981208 +0000 UTC m=+372.128205374 I0728 14:12:31.154769 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:12:31.15475855 +0000 UTC m=+372.151982706 I0728 14:12:31.165903 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:12:36.092539 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:12:36.092523168 +0000 UTC m=+377.089747354 I0728 14:13:17.062798 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 14:13:17.062767591 +0000 UTC m=+418.059991737 I0728 14:13:17.063107 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:17.065268 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 14:13:17.065258354 +0000 UTC m=+418.062482510 I0728 14:13:17.072165 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:17.072194 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 14:13:17.072186218 +0000 UTC m=+418.069410374 I0728 14:13:17.072553 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 14:13:17.072549487 +0000 UTC m=+418.069773643 I0728 14:13:17.072789 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-28 14:13:17.072785673 +0000 UTC m=+418.070009829 I0728 14:13:17.072922 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:17.072935 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 14:13:17.072932766 +0000 UTC m=+418.070156922 I0728 14:13:17.114033 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.114154 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:17.114192 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 14:13:17.114181994 +0000 UTC m=+418.111406160 I0728 14:13:17.115639 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.116663 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.116726 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 14:13:17.116715397 +0000 UTC m=+418.113939553 I0728 14:13:17.122512 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:17.122556 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 14:13:17.122544904 +0000 UTC m=+418.119769060 I0728 14:13:17.237574 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.278138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-28 14:13:17.278125637 +0000 UTC m=+418.275349793 I0728 14:13:17.279539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-28 14:13:17.279524602 +0000 UTC m=+418.276748758 I0728 14:13:17.299586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-28 14:13:17.299572286 +0000 UTC m=+418.296796502 I0728 14:13:17.302584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-28 14:13:17.302575082 +0000 UTC m=+418.299799278 I0728 14:13:17.342682 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:17.3426735 +0000 UTC m=+418.339897656 I0728 14:13:17.342997 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:17.34184702 +0000 UTC m=+418.339071176 I0728 14:13:17.356117 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.356641 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:17.356634931 +0000 UTC m=+418.353859087 I0728 14:13:17.357907 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.358369 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:17.358360885 +0000 UTC m=+418.355585041 I0728 14:13:17.717952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-28 14:13:17.717937128 +0000 UTC m=+418.715161324 I0728 14:13:17.813314 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.860100 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.909026 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:17.965537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-28 14:13:17.965527885 +0000 UTC m=+418.962752041 I0728 14:13:18.565918 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:18.565891572 +0000 UTC m=+419.563115738 I0728 14:13:18.659143 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:18.659674 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:18.659665992 +0000 UTC m=+419.656890148 I0728 14:13:18.858466 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:33.825986 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" condition "Ready" to 2026-07-28 14:13:33.825963918 +0000 UTC m=+434.823188084 I0728 14:13:33.826365 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:33.826385 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" condition "Issuing" to 2026-07-28 14:13:33.826380839 +0000 UTC m=+434.823605005 I0728 14:13:33.835739 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cwthr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:33.835812 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:33.835933 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" condition "Issuing" to 2026-07-28 14:13:33.835828381 +0000 UTC m=+434.833052547 I0728 14:13:33.963359 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cwthr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:33.974954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cwthr-tls-1" condition "Approved" to 2026-07-28 14:13:33.974936384 +0000 UTC m=+434.972160550 I0728 14:13:33.996842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cwthr-tls-1" condition "Ready" to 2026-07-28 14:13:33.996832245 +0000 UTC m=+434.994056411 I0728 14:13:34.023992 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:34.023980201 +0000 UTC m=+435.021204357 I0728 14:13:34.161241 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cwthr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:34.210115 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cwthr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cwthr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:40.324596 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:40.324645 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 14:13:40.32462449 +0000 UTC m=+441.321848656 I0728 14:13:40.324750 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 14:13:40.324731062 +0000 UTC m=+441.321955218 I0728 14:13:40.335999 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:40.336120 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:40.336172 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 14:13:40.336153617 +0000 UTC m=+441.333377763 I0728 14:13:40.641085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-28 14:13:40.641071137 +0000 UTC m=+441.638295303 I0728 14:13:40.661177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-28 14:13:40.661168256 +0000 UTC m=+441.658392402 I0728 14:13:40.680935 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:40.680927445 +0000 UTC m=+441.678151601 I0728 14:13:40.698863 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:40.699594 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:40.699584527 +0000 UTC m=+441.696808693 I0728 14:13:40.718134 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:40.718638 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:40.718618568 +0000 UTC m=+441.715842724 I0728 14:17:01.693135 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 14:17:01.693121809 +0000 UTC m=+642.690345975 I0728 14:17:01.693169 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:17:01.693213 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 14:17:01.693208592 +0000 UTC m=+642.690432748 I0728 14:17:01.708884 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:01.708993 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 14:17:01.708982939 +0000 UTC m=+642.706207105 I0728 14:17:01.947817 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:01.981781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-28 14:17:01.98176758 +0000 UTC m=+642.978991746 I0728 14:17:01.998388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-28 14:17:01.998376442 +0000 UTC m=+642.995600598 I0728 14:17:02.022515 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:17:02.022487287 +0000 UTC m=+643.019711443 I0728 14:17:02.035645 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:02.036226 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:17:02.036219054 +0000 UTC m=+643.033443220 I0728 14:17:02.050899 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:43.967007 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:17:43.967054 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 14:17:43.967047225 +0000 UTC m=+684.964271391 I0728 14:17:43.967208 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-28 14:17:43.96720126 +0000 UTC m=+684.964425436 I0728 14:17:43.977106 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:17:43.977155 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:17:43.977171 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 14:17:43.97716463 +0000 UTC m=+684.974388796 I0728 14:17:44.275057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-28 14:17:44.275047431 +0000 UTC m=+685.272271587 I0728 14:17:44.292510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-28 14:17:44.292499327 +0000 UTC m=+685.289723493 I0728 14:17:44.314859 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:17:44.31484544 +0000 UTC m=+685.312069606 I0728 14:17:44.332151 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"