I0717 10:48:31.494765 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0717 10:48:31.495026 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0717 10:48:31.499960 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0717 10:48:31.499987 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0717 10:48:31.499996 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0717 10:48:31.500428 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0717 10:48:31.500515 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0717 10:48:31.500536 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0717 10:48:31.503324 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0717 10:48:31.514505 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0717 10:48:31.514696 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0717 10:48:31.522234 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0717 10:48:31.526059 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0717 10:48:31.529861 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0717 10:48:31.532892 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0717 10:48:31.537241 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0717 10:48:31.542331 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0717 10:48:31.542428 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0717 10:48:31.542560 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0717 10:48:31.547318 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0717 10:48:31.550449 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0717 10:48:31.553340 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0717 10:48:31.555101 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0717 10:48:31.560446 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0717 10:48:31.563974 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0717 10:48:31.564005 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0717 10:48:31.564020 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0717 10:48:31.564068 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0717 10:48:31.567861 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0717 10:48:31.569819 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0717 10:48:31.571724 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0717 10:48:31.573485 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0717 10:48:31.575219 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0717 10:48:31.577292 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0717 10:48:31.581156 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.582542 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.583438 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.583721 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.584233 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.586601 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.602489 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.622317 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.641961 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.660010 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:31.676246 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 10:48:42.240843 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-17 10:48:42.24081755 +0000 UTC m=+10.772249070 I0717 10:48:42.951091 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:48:42.951174 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-17 10:48:42.951161388 +0000 UTC m=+11.482592908 I0717 10:48:42.951456 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-17 10:48:42.951431736 +0000 UTC m=+11.482863246 E0717 10:48:42.965057 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 10:48:42.965136 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-17 10:48:42.965125385 +0000 UTC m=+11.496556875 E0717 10:48:42.965286 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 10:48:42.970058 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:48:42.970243 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-17 10:48:42.970121368 +0000 UTC m=+11.501552858 E0717 10:48:42.985480 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0717 10:48:42.985632 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 10:48:42.985665 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 10:48:42.985707 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0717 10:48:42.989142 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:48:43.020526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-17 10:48:43.02051259 +0000 UTC m=+11.551944080 I0717 10:48:43.042046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-17 10:48:43.04203607 +0000 UTC m=+11.573467560 I0717 10:48:43.067857 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:48:43.06784674 +0000 UTC m=+11.599278230 I0717 10:48:43.082237 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:48:43.082777 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:48:43.082766311 +0000 UTC m=+11.614197801 I0717 10:48:43.096850 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:48:47.986308 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:48:47.986294294 +0000 UTC m=+16.517725774 I0717 10:49:08.989491 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:49:08.989630 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-17 10:49:08.989610436 +0000 UTC m=+37.521041956 I0717 10:49:08.989717 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 10:49:08.989703989 +0000 UTC m=+37.521135499 I0717 10:49:09.005286 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:49:09.005429 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 10:49:09.005419962 +0000 UTC m=+37.536851452 I0717 10:49:09.005918 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-17 10:49:09.00591233 +0000 UTC m=+37.537343820 I0717 10:49:09.172532 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:49:09.205920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-17 10:49:09.205907541 +0000 UTC m=+37.737339031 I0717 10:49:09.228384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-17 10:49:09.228373419 +0000 UTC m=+37.759804909 I0717 10:49:09.252516 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:49:09.252506501 +0000 UTC m=+37.783937991 I0717 10:49:09.267315 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:49:09.271106 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:49:09.271093002 +0000 UTC m=+37.802524482 I0717 10:49:09.284738 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:53:32.038200 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:53:32.038278 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-07-17 10:53:32.038260094 +0000 UTC m=+300.569691584 I0717 10:53:32.038887 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-07-17 10:53:32.03888172 +0000 UTC m=+300.570313210 I0717 10:53:32.050710 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:53:32.050966 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:53:32.050991 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-07-17 10:53:32.050986409 +0000 UTC m=+300.582417899 I0717 10:53:32.285516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:53:32.301350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-1" condition "Approved" to 2026-07-17 10:53:32.301333291 +0000 UTC m=+300.832764801 I0717 10:53:32.316575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-1" condition "Ready" to 2026-07-17 10:53:32.316564856 +0000 UTC m=+300.847996376 I0717 10:53:32.337233 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:53:32.3372268 +0000 UTC m=+300.868658290 I0717 10:53:32.350044 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:53:32.399159 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:54:36.623660 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-17 10:54:36.623636429 +0000 UTC m=+365.155067969 I0717 10:54:36.623711 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:54:36.623777 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 10:54:36.623767533 +0000 UTC m=+365.155199013 E0717 10:54:36.633729 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 10:54:36.633828 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-17 10:54:36.633788673 +0000 UTC m=+365.165220153 E0717 10:54:36.633857 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 10:54:36.634771 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:54:36.634843 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:54:36.634867 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 10:54:36.634863106 +0000 UTC m=+365.166294586 E0717 10:54:36.641216 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0717 10:54:36.641298 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 10:54:36.641317 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 10:54:36.641355 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0717 10:54:36.661357 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:54:36.670323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-17 10:54:36.670314402 +0000 UTC m=+365.201745872 I0717 10:54:36.686020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-17 10:54:36.686005598 +0000 UTC m=+365.217437078 I0717 10:54:36.708597 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:54:36.708536094 +0000 UTC m=+365.239967584 I0717 10:54:36.722066 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:54:36.722671 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:54:36.722661141 +0000 UTC m=+365.254092611 I0717 10:54:36.738332 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:54:36.740237 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0717 10:54:36.741239 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca-sv49c\" not found" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" I0717 10:54:41.642089 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:54:41.642069078 +0000 UTC m=+370.173500588 I0717 10:55:23.301881 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-17 10:55:23.301866162 +0000 UTC m=+411.833297642 I0717 10:55:23.302281 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:55:23.302379 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:55:23.302421 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:55:23.302291 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-17 10:55:23.302287737 +0000 UTC m=+411.833719217 I0717 10:55:23.304815 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 10:55:23.304799503 +0000 UTC m=+411.836231003 I0717 10:55:23.302395 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-17 10:55:23.30239317 +0000 UTC m=+411.833824650 I0717 10:55:23.302434 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-17 10:55:23.302432051 +0000 UTC m=+411.833863531 I0717 10:55:23.302453 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-17 10:55:23.302451873 +0000 UTC m=+411.833883363 I0717 10:55:23.333164 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.333590 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.334676 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-17 10:55:23.334664925 +0000 UTC m=+411.866096405 I0717 10:55:23.334752 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-17 10:55:23.333819346 +0000 UTC m=+411.865250836 I0717 10:55:23.337472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.337575 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:55:23.337609 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 10:55:23.337598505 +0000 UTC m=+411.869029985 I0717 10:55:23.455045 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.486022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-17 10:55:23.486001735 +0000 UTC m=+412.017433255 I0717 10:55:23.507113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-17 10:55:23.507097307 +0000 UTC m=+412.038528797 I0717 10:55:23.555143 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:23.555124161 +0000 UTC m=+412.086555671 I0717 10:55:23.591044 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.591623 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:23.59161383 +0000 UTC m=+412.123045310 I0717 10:55:23.598520 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.603566 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.605577 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:23.605564748 +0000 UTC m=+412.136996238 I0717 10:55:23.605765 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.850233 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.884650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-17 10:55:23.88463082 +0000 UTC m=+412.416062310 I0717 10:55:23.901282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-17 10:55:23.90126391 +0000 UTC m=+412.432695390 I0717 10:55:23.954795 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:23.954783532 +0000 UTC m=+412.486215012 I0717 10:55:23.989374 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:23.990098 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:23.99008656 +0000 UTC m=+412.521518040 I0717 10:55:24.072313 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:24.326600 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:24.381516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-17 10:55:24.381486819 +0000 UTC m=+412.912918329 I0717 10:55:24.735186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-17 10:55:24.735169667 +0000 UTC m=+413.266601177 I0717 10:55:24.935734 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:24.935723233 +0000 UTC m=+413.467154713 I0717 10:55:25.023570 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:25.024447 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:25.024436676 +0000 UTC m=+413.555868186 I0717 10:55:25.273091 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:25.325146 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:25.424487 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:31.721345 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:55:31.721402 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" condition "Issuing" to 2026-07-17 10:55:31.721389645 +0000 UTC m=+420.252821165 I0717 10:55:31.721548 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" condition "Ready" to 2026-07-17 10:55:31.72152661 +0000 UTC m=+420.252958100 I0717 10:55:31.735602 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:31.735693 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" condition "Ready" to 2026-07-17 10:55:31.735686581 +0000 UTC m=+420.267118081 I0717 10:55:31.865954 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:31.903944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls-1" condition "Approved" to 2026-07-17 10:55:31.903925475 +0000 UTC m=+420.435356965 I0717 10:55:31.919143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls-1" condition "Ready" to 2026-07-17 10:55:31.919132783 +0000 UTC m=+420.450564273 I0717 10:55:31.945507 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:31.945490037 +0000 UTC m=+420.476921527 I0717 10:55:31.962530 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:31.962892 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:31.96288153 +0000 UTC m=+420.494313010 I0717 10:55:31.981075 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:31.991556 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5bsfw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:45.332020 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:55:45.332093 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-17 10:55:45.332080767 +0000 UTC m=+433.863512257 I0717 10:55:45.333611 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-17 10:55:45.33357961 +0000 UTC m=+433.865011130 I0717 10:55:45.349355 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:45.349558 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-17 10:55:45.349546226 +0000 UTC m=+433.880977716 I0717 10:55:45.465657 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:55:45.492957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-17 10:55:45.492946773 +0000 UTC m=+434.024378253 I0717 10:55:45.515694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-17 10:55:45.515687078 +0000 UTC m=+434.047118558 I0717 10:55:45.561491 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:55:45.561481429 +0000 UTC m=+434.092912899 I0717 10:55:45.573478 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:59:12.110971 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:59:12.111248 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-17 10:59:12.111239015 +0000 UTC m=+640.642670505 I0717 10:59:12.111337 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-17 10:59:12.111321188 +0000 UTC m=+640.642752668 I0717 10:59:12.122642 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:59:12.122729 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-17 10:59:12.12272136 +0000 UTC m=+640.654152870 I0717 10:59:12.270974 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:59:12.303493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-17 10:59:12.303475034 +0000 UTC m=+640.834906524 I0717 10:59:12.325488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-17 10:59:12.325477644 +0000 UTC m=+640.856909124 I0717 10:59:12.348469 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:59:12.348457852 +0000 UTC m=+640.879889322 I0717 10:59:12.362487 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:59:54.446770 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:59:54.446814 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 10:59:54.446804796 +0000 UTC m=+682.978236286 I0717 10:59:54.447280 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-17 10:59:54.447275076 +0000 UTC m=+682.978706566 I0717 10:59:54.465149 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:59:54.465228 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 10:59:54.465259 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-17 10:59:54.465252229 +0000 UTC m=+682.996683749 I0717 10:59:54.879059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-17 10:59:54.879045865 +0000 UTC m=+683.410477355 I0717 10:59:54.905569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-17 10:59:54.905558205 +0000 UTC m=+683.436989675 I0717 10:59:54.931934 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:59:54.93192684 +0000 UTC m=+683.463358320 I0717 10:59:54.947419 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 10:59:54.948039 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 10:59:54.948031306 +0000 UTC m=+683.479462796 I0717 10:59:54.971258 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"