I0724 04:40:33.014573 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0724 04:40:33.014971 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0724 04:40:33.015516 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 04:40:33.020439 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0724 04:40:33.021046 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0724 04:40:33.021082 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0724 04:40:33.021137 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0724 04:40:33.025583 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 04:40:33.038506 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0724 04:40:33.038795 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0724 04:40:33.043251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0724 04:40:33.062181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0724 04:40:33.064617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0724 04:40:33.066736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0724 04:40:33.068576 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0724 04:40:33.068729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0724 04:40:33.070918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0724 04:40:33.073921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0724 04:40:33.075660 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0724 04:40:33.075678 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0724 04:40:33.075734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0724 04:40:33.077621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0724 04:40:33.085091 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0724 04:40:33.087539 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0724 04:40:33.090094 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0724 04:40:33.092575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0724 04:40:33.095157 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0724 04:40:33.095182 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0724 04:40:33.095329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0724 04:40:33.097945 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0724 04:40:33.099733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0724 04:40:33.101597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0724 04:40:33.107168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0724 04:40:33.109209 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.110477 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.111500 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.111554 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.111975 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.112311 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.112089 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.112792 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.113035 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:33.194100 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0724 04:40:51.746849 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-24 04:40:51.746819145 +0000 UTC m=+18.765896371 I0724 04:40:52.474226 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-24 04:40:52.474210034 +0000 UTC m=+19.493287280 I0724 04:40:52.474432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:40:52.474476 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 04:40:52.474470585 +0000 UTC m=+19.493547811 I0724 04:40:52.708441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:40:52.708657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:40:52.708742 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 04:40:52.70873162 +0000 UTC m=+19.727808866 E0724 04:40:52.725510 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 04:40:52.725597 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-24 04:40:52.72558862 +0000 UTC m=+19.744665866 E0724 04:40:52.725626 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:40:53.037283 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0724 04:40:53.037394 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:40:53.037438 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:40:53.037490 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0724 04:40:53.405539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7jnxz" condition "Approved" to 2026-07-24 04:40:53.405523396 +0000 UTC m=+20.424600642 I0724 04:40:53.496501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7jnxz" condition "Ready" to 2026-07-24 04:40:53.496490957 +0000 UTC m=+20.515568173 I0724 04:40:53.723177 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:40:53.72316139 +0000 UTC m=+20.742238616 I0724 04:40:53.957809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:40:54.237411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:40:58.038158 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:40:58.038140576 +0000 UTC m=+25.057217822 I0724 04:41:37.065655 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-24 04:41:37.065616428 +0000 UTC m=+64.084693654 I0724 04:41:37.066034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:41:37.066060 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 04:41:37.06605648 +0000 UTC m=+64.085133696 I0724 04:41:37.086396 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-24 04:41:37.086377969 +0000 UTC m=+64.105455195 I0724 04:41:37.091637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:41:37.091721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:41:37.091754 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 04:41:37.091743705 +0000 UTC m=+64.110820951 I0724 04:41:37.364517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4fzgb" condition "Approved" to 2026-07-24 04:41:37.364503731 +0000 UTC m=+64.383580977 I0724 04:41:37.391958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4fzgb" condition "Ready" to 2026-07-24 04:41:37.391946622 +0000 UTC m=+64.411023848 I0724 04:41:37.422774 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:41:37.422753083 +0000 UTC m=+64.441830309 I0724 04:41:37.453847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:41:37.454394 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:41:37.454387787 +0000 UTC m=+64.473465013 I0724 04:41:37.459493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:41:37.477819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:41:37.478201 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:41:37.478192877 +0000 UTC m=+64.497270093 I0724 04:41:37.478555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:13.363767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-37.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:13.363845 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-37.nip.io-tls" condition "Issuing" to 2026-07-24 04:47:13.363819214 +0000 UTC m=+400.382896470 I0724 04:47:13.364500 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-37.nip.io-tls" condition "Ready" to 2026-07-24 04:47:13.363784404 +0000 UTC m=+400.382861680 I0724 04:47:13.542955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-37.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-37.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:13.543205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-37.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:47:13.543248 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-37.nip.io-tls" condition "Issuing" to 2026-07-24 04:47:13.543222852 +0000 UTC m=+400.562300078 I0724 04:47:13.937353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-37.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-37.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:13.997455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-37.nip.io-tls-zx624" condition "Approved" to 2026-07-24 04:47:13.997441797 +0000 UTC m=+401.016519053 I0724 04:47:14.082073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-37.nip.io-tls-zx624" condition "Ready" to 2026-07-24 04:47:14.082062436 +0000 UTC m=+401.101139672 I0724 04:47:14.180088 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-37.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:14.180069094 +0000 UTC m=+401.199146350 I0724 04:47:14.212306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-37.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-37.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:47:14.212682 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-37.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:47:14.21267503 +0000 UTC m=+401.231752236 I0724 04:47:14.259824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-37.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-37.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:48:19.383977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:48:19.384083 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-24 04:48:19.384036695 +0000 UTC m=+466.403113941 I0724 04:48:19.384844 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-24 04:48:19.384798228 +0000 UTC m=+466.403875474 E0724 04:48:19.415079 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 04:48:19.415127 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-24 04:48:19.415119957 +0000 UTC m=+466.434197183 E0724 04:48:19.415174 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 04:48:19.418198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:48:19.418253 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-24 04:48:19.418248847 +0000 UTC m=+466.437326073 E0724 04:48:19.480376 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0724 04:48:19.480509 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:48:19.480550 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 04:48:19.480595 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0724 04:48:19.517549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:48:20.120713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t8gsx" condition "Approved" to 2026-07-24 04:48:20.120696772 +0000 UTC m=+467.139774028 I0724 04:48:20.708775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t8gsx" condition "Ready" to 2026-07-24 04:48:20.708757671 +0000 UTC m=+467.727834927 I0724 04:48:21.097209 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:48:21.097190593 +0000 UTC m=+468.116267839 I0724 04:48:21.166279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:48:24.481691 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:48:24.481677325 +0000 UTC m=+471.500754571 I0724 04:49:10.691616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:49:10.691689 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 04:49:10.691646285 +0000 UTC m=+517.710723511 I0724 04:49:10.691819 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-24 04:49:10.691812165 +0000 UTC m=+517.710889391 I0724 04:49:10.692649 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-24 04:49:10.692643797 +0000 UTC m=+517.711721023 I0724 04:49:10.692934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:49:10.697985 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-24 04:49:10.697960453 +0000 UTC m=+517.717037669 I0724 04:49:10.694011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:49:10.703590 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-24 04:49:10.70357219 +0000 UTC m=+517.722649426 I0724 04:49:10.694065 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-24 04:49:10.694057812 +0000 UTC m=+517.713135018 I0724 04:49:10.760530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:10.760930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:10.761110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:10.761174 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-24 04:49:10.761168499 +0000 UTC m=+517.780245715 I0724 04:49:10.773042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:49:10.773162 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:49:10.773220 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-24 04:49:10.773213634 +0000 UTC m=+517.792290840 I0724 04:49:10.773176 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-24 04:49:10.773169954 +0000 UTC m=+517.792247170 I0724 04:49:10.959583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gsgw2" condition "Approved" to 2026-07-24 04:49:10.959571863 +0000 UTC m=+517.978649079 I0724 04:49:10.981815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gsgw2" condition "Ready" to 2026-07-24 04:49:10.981804527 +0000 UTC m=+518.000881763 I0724 04:49:11.018492 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:49:11.018479226 +0000 UTC m=+518.037556452 I0724 04:49:11.052149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:11.052788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:11.092904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-br5r4" condition "Approved" to 2026-07-24 04:49:11.092889814 +0000 UTC m=+518.111967040 I0724 04:49:11.144239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-br5r4" condition "Ready" to 2026-07-24 04:49:11.144228195 +0000 UTC m=+518.163305411 I0724 04:49:11.168543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:11.180977 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:49:11.180962994 +0000 UTC m=+518.200040220 I0724 04:49:11.273958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:11.332990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7jp4n" condition "Approved" to 2026-07-24 04:49:11.332977781 +0000 UTC m=+518.352054997 I0724 04:49:11.434504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7jp4n" condition "Ready" to 2026-07-24 04:49:11.434492709 +0000 UTC m=+518.453569925 I0724 04:49:12.073182 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:49:12.073164647 +0000 UTC m=+519.092241893 I0724 04:49:12.221731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:12.222097 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:49:12.222092095 +0000 UTC m=+519.241169321 I0724 04:49:12.421427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:20.485731 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" condition "Ready" to 2026-07-24 04:49:20.485717813 +0000 UTC m=+527.504795029 I0724 04:49:20.485795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:49:20.485823 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" condition "Issuing" to 2026-07-24 04:49:20.485815034 +0000 UTC m=+527.504892260 I0724 04:49:20.508180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:20.508351 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" condition "Ready" to 2026-07-24 04:49:20.50833878 +0000 UTC m=+527.527416006 I0724 04:49:20.842147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:20.869838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4gnzh-jbfrl" condition "Approved" to 2026-07-24 04:49:20.869827703 +0000 UTC m=+527.888904929 I0724 04:49:20.887958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4gnzh-jbfrl" condition "Ready" to 2026-07-24 04:49:20.887950897 +0000 UTC m=+527.907028113 I0724 04:49:20.939133 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:49:20.939112867 +0000 UTC m=+527.958190123 I0724 04:49:21.003683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:21.120258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4gnzh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:47.870905 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-24 04:49:47.870891979 +0000 UTC m=+554.889969205 I0724 04:49:47.871189 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:49:47.871241 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-24 04:49:47.871231689 +0000 UTC m=+554.890308915 I0724 04:49:47.896529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:47.896614 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-24 04:49:47.896607064 +0000 UTC m=+554.915684290 I0724 04:49:48.097310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:48.124909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2rv7z" condition "Approved" to 2026-07-24 04:49:48.124897236 +0000 UTC m=+555.143974462 I0724 04:49:48.142355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2rv7z" condition "Ready" to 2026-07-24 04:49:48.142343897 +0000 UTC m=+555.161421113 I0724 04:49:48.178374 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:49:48.178361463 +0000 UTC m=+555.197438679 I0724 04:49:48.201528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:48.205635 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:49:48.205627302 +0000 UTC m=+555.224704518 I0724 04:49:48.224798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:49:48.225198 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:49:48.22518761 +0000 UTC m=+555.244264866 I0724 04:53:23.354000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:53:23.354150 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-24 04:53:23.354132333 +0000 UTC m=+770.373209589 I0724 04:53:23.354371 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-24 04:53:23.354364924 +0000 UTC m=+770.373442140 I0724 04:53:23.392951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:53:23.393385 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-24 04:53:23.393364389 +0000 UTC m=+770.412441675 I0724 04:53:23.510254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:53:23.555694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4cvwv" condition "Approved" to 2026-07-24 04:53:23.555679246 +0000 UTC m=+770.574756482 I0724 04:53:23.589106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4cvwv" condition "Ready" to 2026-07-24 04:53:23.589094784 +0000 UTC m=+770.608172010 I0724 04:53:23.627776 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:53:23.627764048 +0000 UTC m=+770.646841274 I0724 04:53:23.655233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:53:23.657663 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:53:23.657657725 +0000 UTC m=+770.676734941 I0724 04:53:23.730053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:54:05.413626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:54:05.413688 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-24 04:54:05.413674817 +0000 UTC m=+812.432752043 I0724 04:54:05.414042 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-24 04:54:05.414035588 +0000 UTC m=+812.433112814 I0724 04:54:05.428398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:54:05.428437 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 04:54:05.428447 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-24 04:54:05.428443071 +0000 UTC m=+812.447520287 I0724 04:54:05.811786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lnfsz" condition "Approved" to 2026-07-24 04:54:05.811778127 +0000 UTC m=+812.830855343 I0724 04:54:05.831179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lnfsz" condition "Ready" to 2026-07-24 04:54:05.831171344 +0000 UTC m=+812.850248570 I0724 04:54:05.891019 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:54:05.891005781 +0000 UTC m=+812.910082997 I0724 04:54:05.919600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:54:05.920099 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:54:05.920091146 +0000 UTC m=+812.939168362 I0724 04:54:05.924937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:54:05.939025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0724 04:54:05.939288 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 04:54:05.939282313 +0000 UTC m=+812.958359529