I0916 21:47:04.293712 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0916 21:47:04.293782 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0916 21:47:04.293822 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0916 21:47:04.296206 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0916 21:47:04.296520 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0916 21:47:04.296568 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0916 21:47:04.296588 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0916 21:47:04.301302 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0916 21:47:04.311731 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0916 21:47:04.314199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0916 21:47:04.316892 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0916 21:47:04.317140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0916 21:47:04.319924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0916 21:47:04.322361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0916 21:47:04.327220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0916 21:47:04.329111 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0916 21:47:04.330848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0916 21:47:04.332615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0916 21:47:04.334854 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0916 21:47:04.334976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0916 21:47:04.337089 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0916 21:47:04.338940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0916 21:47:04.342314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0916 21:47:04.342600 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0916 21:47:04.345458 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0916 21:47:04.345546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0916 21:47:04.348111 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0916 21:47:04.348176 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0916 21:47:04.348168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0916 21:47:04.350663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0916 21:47:04.352603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0916 21:47:04.354374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0916 21:47:04.356800 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0916 21:47:04.358336 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.359978 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.360491 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.360600 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.375718 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.392233 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.401353 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.414279 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.425960 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:04.453114 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0916 21:47:16.306141 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-16 21:47:16.306122602 +0000 UTC m=+12.037645748 I0916 21:47:17.118587 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-16 21:47:17.118559681 +0000 UTC m=+12.850082827 I0916 21:47:17.118702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:47:17.118798 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-16 21:47:17.118792809 +0000 UTC m=+12.850315975 E0916 21:47:17.134014 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0916 21:47:17.134093 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-16 21:47:17.134084677 +0000 UTC m=+12.865607823 E0916 21:47:17.134129 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0916 21:47:17.136113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:47:17.136262 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-16 21:47:17.136251561 +0000 UTC m=+12.867774737 E0916 21:47:17.145937 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0916 21:47:17.146635 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0916 21:47:17.146760 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0916 21:47:17.146796 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0916 21:47:17.171772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:47:17.197399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fbpqw" condition "Approved" to 2026-09-16 21:47:17.197384542 +0000 UTC m=+12.928907688 I0916 21:47:17.215158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fbpqw" condition "Ready" to 2026-09-16 21:47:17.215142863 +0000 UTC m=+12.946666019 I0916 21:47:17.245762 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:47:17.24574341 +0000 UTC m=+12.977266576 I0916 21:47:17.268901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:47:17.269425 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:47:17.269413972 +0000 UTC m=+13.000937148 I0916 21:47:17.285630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:47:17.286154 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:47:17.286144298 +0000 UTC m=+13.017667454 I0916 21:47:17.289479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:47:22.146669 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:47:22.146656485 +0000 UTC m=+17.878179631 I0916 21:47:44.720279 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-16 21:47:44.720266758 +0000 UTC m=+40.451789914 I0916 21:47:44.722086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:47:44.722866 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-16 21:47:44.722860776 +0000 UTC m=+40.454383942 I0916 21:47:44.738434 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-16 21:47:44.738421704 +0000 UTC m=+40.469944860 I0916 21:47:44.751881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:47:44.751948 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-16 21:47:44.751942228 +0000 UTC m=+40.483465374 I0916 21:47:44.888176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:47:44.929408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4qm26" condition "Approved" to 2026-09-16 21:47:44.929395156 +0000 UTC m=+40.660918302 I0916 21:47:44.963863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4qm26" condition "Ready" to 2026-09-16 21:47:44.963846068 +0000 UTC m=+40.695369244 I0916 21:47:44.994724 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:47:44.994712386 +0000 UTC m=+40.726235532 I0916 21:47:45.016887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:47:45.066675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:52:22.751295 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Ready" to 2026-09-16 21:52:22.751233746 +0000 UTC m=+318.482756932 I0916 21:52:22.751606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-166.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:52:22.751654 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Issuing" to 2026-09-16 21:52:22.751647069 +0000 UTC m=+318.483170205 I0916 21:52:22.775985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:52:22.776106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-166.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:52:22.776136 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Issuing" to 2026-09-16 21:52:22.776127231 +0000 UTC m=+318.507650407 I0916 21:52:22.967392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:52:22.978274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-166.nip.io-tls-7jzq4" condition "Approved" to 2026-09-16 21:52:22.97826264 +0000 UTC m=+318.709785816 I0916 21:52:23.007310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-166.nip.io-tls-7jzq4" condition "Ready" to 2026-09-16 21:52:23.007296227 +0000 UTC m=+318.738819403 I0916 21:52:23.036655 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:52:23.036645781 +0000 UTC m=+318.768168947 I0916 21:52:23.056380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:52:23.056751 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:52:23.056744612 +0000 UTC m=+318.788267758 I0916 21:52:23.074730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:53:30.587380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:53:30.588202 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-16 21:53:30.587454002 +0000 UTC m=+386.318977188 I0916 21:53:30.588489 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-16 21:53:30.58738034 +0000 UTC m=+386.318903516 E0916 21:53:30.605168 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0916 21:53:30.605238 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-16 21:53:30.605226695 +0000 UTC m=+386.336749881 E0916 21:53:30.605903 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0916 21:53:30.624111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:53:30.624221 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-16 21:53:30.624209727 +0000 UTC m=+386.355732903 E0916 21:53:30.647071 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0916 21:53:30.647385 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0916 21:53:30.647579 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0916 21:53:30.647855 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0916 21:53:30.750992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:53:30.815153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2d6p7" condition "Approved" to 2026-09-16 21:53:30.815145027 +0000 UTC m=+386.546668173 I0916 21:53:30.830758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2d6p7" condition "Ready" to 2026-09-16 21:53:30.830745849 +0000 UTC m=+386.562268995 I0916 21:53:30.851999 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:53:30.851985425 +0000 UTC m=+386.583508571 I0916 21:53:30.873614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:53:30.873888 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:53:30.873881637 +0000 UTC m=+386.605404783 I0916 21:53:30.887731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:53:35.648039 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:53:35.648027104 +0000 UTC m=+391.379550250 I0916 21:54:19.855091 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-16 21:54:19.855028267 +0000 UTC m=+435.586551453 I0916 21:54:19.857190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:54:19.857240 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-16 21:54:19.857231303 +0000 UTC m=+435.588754489 I0916 21:54:19.868413 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-16 21:54:19.86839391 +0000 UTC m=+435.599917106 I0916 21:54:19.869613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:54:19.869659 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-16 21:54:19.869651207 +0000 UTC m=+435.601174383 I0916 21:54:19.869972 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-16 21:54:19.869925843 +0000 UTC m=+435.601448999 I0916 21:54:19.875982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:54:19.876054 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-16 21:54:19.876039643 +0000 UTC m=+435.607562829 I0916 21:54:19.938893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:19.939125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:19.942608 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:54:19.942633 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-16 21:54:19.942628688 +0000 UTC m=+435.674151834 I0916 21:54:19.943667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:54:19.943741 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-16 21:54:19.943732971 +0000 UTC m=+435.675256137 I0916 21:54:19.946398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:19.946462 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-16 21:54:19.946453899 +0000 UTC m=+435.677977055 I0916 21:54:20.276190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:20.448949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-72cdp" condition "Approved" to 2026-09-16 21:54:20.448938387 +0000 UTC m=+436.180461543 I0916 21:54:20.472064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:20.475889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dqvv4" condition "Approved" to 2026-09-16 21:54:20.475853067 +0000 UTC m=+436.207376223 I0916 21:54:20.476055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ckrbr" condition "Approved" to 2026-09-16 21:54:20.476043141 +0000 UTC m=+436.207566297 I0916 21:54:20.515093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-72cdp" condition "Ready" to 2026-09-16 21:54:20.515079079 +0000 UTC m=+436.246602245 I0916 21:54:20.523159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ckrbr" condition "Ready" to 2026-09-16 21:54:20.52314351 +0000 UTC m=+436.254666666 I0916 21:54:20.523168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dqvv4" condition "Ready" to 2026-09-16 21:54:20.523156701 +0000 UTC m=+436.254679857 I0916 21:54:20.837063 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:20.837046457 +0000 UTC m=+436.568569633 I0916 21:54:20.864531 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:20.864513199 +0000 UTC m=+436.596036385 I0916 21:54:20.864862 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:20.864844596 +0000 UTC m=+436.596367772 I0916 21:54:21.129750 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:21.129732278 +0000 UTC m=+436.861255464 I0916 21:54:21.138316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:21.156410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:21.161815 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:21.161801737 +0000 UTC m=+436.893324923 I0916 21:54:21.167884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:21.168372 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:21.168364056 +0000 UTC m=+436.899887272 I0916 21:54:21.168424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:21.463466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:21.571646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:21.597573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:21.638267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:40.500456 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" condition "Ready" to 2026-09-16 21:54:40.500442566 +0000 UTC m=+456.231965722 I0916 21:54:40.500707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:54:40.500720 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" condition "Issuing" to 2026-09-16 21:54:40.500718112 +0000 UTC m=+456.232241248 I0916 21:54:40.516306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:40.516421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:54:40.516509 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" condition "Issuing" to 2026-09-16 21:54:40.516502144 +0000 UTC m=+456.248025290 I0916 21:54:40.658632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:40.676705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pxmvs-56cqg" condition "Approved" to 2026-09-16 21:54:40.676695544 +0000 UTC m=+456.408218690 I0916 21:54:40.702319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pxmvs-56cqg" condition "Ready" to 2026-09-16 21:54:40.702309186 +0000 UTC m=+456.433832332 I0916 21:54:40.726070 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:40.726057321 +0000 UTC m=+456.457580467 I0916 21:54:40.753739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:40.754288 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:40.754279807 +0000 UTC m=+456.485802963 I0916 21:54:40.779656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:40.794907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pxmvs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:52.789670 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:54:52.789700 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-16 21:54:52.789692846 +0000 UTC m=+468.521216002 I0916 21:54:52.789712 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-16 21:54:52.789698057 +0000 UTC m=+468.521221203 I0916 21:54:52.809998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:52.810112 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-16 21:54:52.810103774 +0000 UTC m=+468.541626910 I0916 21:54:53.011554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:54:53.045112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4sfrb" condition "Approved" to 2026-09-16 21:54:53.045096361 +0000 UTC m=+468.776619537 I0916 21:54:53.060325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4sfrb" condition "Ready" to 2026-09-16 21:54:53.060313005 +0000 UTC m=+468.791836151 I0916 21:54:53.094031 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:54:53.094017498 +0000 UTC m=+468.825540644 I0916 21:54:53.120769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:58:11.103545 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-16 21:58:11.103489857 +0000 UTC m=+666.835013033 I0916 21:58:11.103848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:58:11.103904 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-16 21:58:11.103892013 +0000 UTC m=+666.835415199 I0916 21:58:11.118937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:58:11.119008 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-16 21:58:11.119000585 +0000 UTC m=+666.850523741 I0916 21:58:11.230851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:58:11.263358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pk4rk" condition "Approved" to 2026-09-16 21:58:11.263343696 +0000 UTC m=+666.994866842 I0916 21:58:11.282362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pk4rk" condition "Ready" to 2026-09-16 21:58:11.282351582 +0000 UTC m=+667.013874728 I0916 21:58:11.313236 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:58:11.313226215 +0000 UTC m=+667.044749361 I0916 21:58:11.344382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:58:11.345295 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:58:11.345289119 +0000 UTC m=+667.076812265 I0916 21:58:11.368914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:58:11.369132 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:58:11.369126155 +0000 UTC m=+667.100649301 I0916 21:58:51.026019 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-16 21:58:51.0259913 +0000 UTC m=+706.757514456 I0916 21:58:51.026542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:58:51.026757 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-16 21:58:51.026561459 +0000 UTC m=+706.758084615 I0916 21:58:51.054623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:58:51.054742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:58:51.054759 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-16 21:58:51.054753881 +0000 UTC m=+706.786277037 I0916 21:58:51.382601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dpsjr" condition "Approved" to 2026-09-16 21:58:51.382592965 +0000 UTC m=+707.114116111 I0916 21:58:51.407036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dpsjr" condition "Ready" to 2026-09-16 21:58:51.407027676 +0000 UTC m=+707.138550822 I0916 21:58:51.447602 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:58:51.447581511 +0000 UTC m=+707.179104657 I0916 21:58:51.469974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"