I0903 02:27:29.056034 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0903 02:27:29.056181 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0903 02:27:29.056266 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0903 02:27:29.064255 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0903 02:27:29.064920 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0903 02:27:29.065002 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0903 02:27:29.065117 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0903 02:27:29.069065 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0903 02:27:29.086592 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0903 02:27:29.092225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0903 02:27:29.096141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0903 02:27:29.105154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0903 02:27:29.109329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0903 02:27:29.113478 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0903 02:27:29.113524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0903 02:27:29.121957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0903 02:27:29.128165 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0903 02:27:29.132893 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0903 02:27:29.139682 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0903 02:27:29.144788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0903 02:27:29.148947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0903 02:27:29.152986 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0903 02:27:29.157329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0903 02:27:29.161538 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0903 02:27:29.161585 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0903 02:27:29.161601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0903 02:27:29.161608 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0903 02:27:29.164939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0903 02:27:29.167342 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0903 02:27:29.167405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0903 02:27:29.169700 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0903 02:27:29.169889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0903 02:27:29.176091 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0903 02:27:29.181603 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.182199 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.182254 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.186033 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.204449 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.222629 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.244866 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.268375 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.287861 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:29.288075 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0903 02:27:42.825795 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-03 02:27:42.825774168 +0000 UTC m=+13.824826699 I0903 02:27:43.599106 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-03 02:27:43.599083838 +0000 UTC m=+14.598136359 I0903 02:27:43.599342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:27:43.599422 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-03 02:27:43.599385183 +0000 UTC m=+14.598437704 E0903 02:27:43.621326 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 02:27:43.621423 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-03 02:27:43.621409309 +0000 UTC m=+14.620461830 E0903 02:27:43.621467 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 02:27:43.626929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:27:43.627056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:27:43.627106 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-03 02:27:43.627093734 +0000 UTC m=+14.626146265 E0903 02:27:43.634202 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0903 02:27:43.634365 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 02:27:43.634460 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 02:27:43.634535 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0903 02:27:43.676291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rqstq" condition "Approved" to 2026-09-03 02:27:43.676272512 +0000 UTC m=+14.675325083 I0903 02:27:43.690767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rqstq" condition "Ready" to 2026-09-03 02:27:43.690746939 +0000 UTC m=+14.689799460 I0903 02:27:43.720144 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:27:43.72012856 +0000 UTC m=+14.719181051 I0903 02:27:43.742268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:27:48.635257 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:27:48.635236128 +0000 UTC m=+19.634288649 I0903 02:28:13.912908 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-03 02:28:13.912786226 +0000 UTC m=+44.911838727 I0903 02:28:13.913569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:28:13.913597 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-03 02:28:13.913592779 +0000 UTC m=+44.912645280 I0903 02:28:13.938148 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-03 02:28:13.938131019 +0000 UTC m=+44.937183530 I0903 02:28:13.950870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:28:13.950992 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-03 02:28:13.950982224 +0000 UTC m=+44.950034725 I0903 02:28:14.169012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:28:14.217700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gvcw7" condition "Approved" to 2026-09-03 02:28:14.217677272 +0000 UTC m=+45.216729793 I0903 02:28:14.305180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gvcw7" condition "Ready" to 2026-09-03 02:28:14.305161038 +0000 UTC m=+45.304213559 I0903 02:28:14.352648 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:28:14.35263388 +0000 UTC m=+45.351686381 I0903 02:28:14.374854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:28:14.375177 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:28:14.375169507 +0000 UTC m=+45.374222008 I0903 02:28:14.396259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:34:04.622477 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-55.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:34:04.622765 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Issuing" to 2026-09-03 02:34:04.62265697 +0000 UTC m=+395.621709501 I0903 02:34:04.623039 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready" to 2026-09-03 02:34:04.623018267 +0000 UTC m=+395.622070798 I0903 02:34:04.655246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-55.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-55.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:34:04.655357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-55.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:34:04.655380 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Issuing" to 2026-09-03 02:34:04.655371143 +0000 UTC m=+395.654423644 I0903 02:34:04.793724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-55.nip.io-tls-4hc58" condition "Approved" to 2026-09-03 02:34:04.793711624 +0000 UTC m=+395.792764115 I0903 02:34:04.822859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-55.nip.io-tls-4hc58" condition "Ready" to 2026-09-03 02:34:04.822845945 +0000 UTC m=+395.821898436 I0903 02:34:04.847745 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:34:04.847733998 +0000 UTC m=+395.846786499 I0903 02:34:04.867776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-55.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-55.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:34:04.868162 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:34:04.868153852 +0000 UTC m=+395.867206353 I0903 02:34:04.884395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-55.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-55.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:34:04.885579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-55.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-55.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:34:04.885782 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:34:04.885774979 +0000 UTC m=+395.884827470 I0903 02:35:15.668163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:35:15.668236 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-03 02:35:15.668219724 +0000 UTC m=+466.667272255 I0903 02:35:15.668178 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-03 02:35:15.668148733 +0000 UTC m=+466.667201254 E0903 02:35:15.698190 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 02:35:15.698251 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-03 02:35:15.698235882 +0000 UTC m=+466.697288403 E0903 02:35:15.698327 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 02:35:15.698364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:35:15.698468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:35:15.698496 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-03 02:35:15.698487927 +0000 UTC m=+466.697540448 E0903 02:35:15.717292 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0903 02:35:15.717502 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 02:35:15.718257 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 02:35:15.720097 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0903 02:35:15.757125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:35:15.761087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dq5cf" condition "Approved" to 2026-09-03 02:35:15.761063429 +0000 UTC m=+466.760115960 I0903 02:35:15.779646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dq5cf" condition "Ready" to 2026-09-03 02:35:15.779633179 +0000 UTC m=+466.778685670 I0903 02:35:15.807838 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:35:15.807816513 +0000 UTC m=+466.806869044 I0903 02:35:15.826809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:35:15.876203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:35:20.718059 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:35:20.718040533 +0000 UTC m=+471.717093064 I0903 02:36:07.431184 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-03 02:36:07.431168084 +0000 UTC m=+518.430220565 I0903 02:36:07.433288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:36:07.433348 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-03 02:36:07.433342202 +0000 UTC m=+518.432394703 I0903 02:36:07.433327 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-03 02:36:07.433300172 +0000 UTC m=+518.432352663 I0903 02:36:07.433539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:36:07.433567 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-03 02:36:07.433564796 +0000 UTC m=+518.432617287 I0903 02:36:07.433759 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-03 02:36:07.433755379 +0000 UTC m=+518.432807880 I0903 02:36:07.433818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:36:07.433843 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-03 02:36:07.433830891 +0000 UTC m=+518.432883382 I0903 02:36:07.530090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:07.530319 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-03 02:36:07.530311255 +0000 UTC m=+518.529363746 I0903 02:36:07.538220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:07.546698 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-03 02:36:07.538281634 +0000 UTC m=+518.537334125 I0903 02:36:07.587807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:07.588049 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-03 02:36:07.588039278 +0000 UTC m=+518.587091769 I0903 02:36:07.847059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:07.899746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:07.946150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jsrrh" condition "Approved" to 2026-09-03 02:36:07.946136715 +0000 UTC m=+518.945189196 I0903 02:36:07.970901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jsrrh" condition "Ready" to 2026-09-03 02:36:07.970885785 +0000 UTC m=+518.969938276 I0903 02:36:08.001806 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:08.001796092 +0000 UTC m=+519.000848583 I0903 02:36:08.036205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:08.101395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:08.104780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:08.134510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cnvnt" condition "Approved" to 2026-09-03 02:36:08.134492184 +0000 UTC m=+519.133544665 I0903 02:36:08.159644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cnvnt" condition "Ready" to 2026-09-03 02:36:08.15963104 +0000 UTC m=+519.158683531 I0903 02:36:08.220641 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:08.220626998 +0000 UTC m=+519.219679479 I0903 02:36:08.231321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:08.231615 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:08.231607558 +0000 UTC m=+519.230660049 I0903 02:36:08.264877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:08.599485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zjrjq" condition "Approved" to 2026-09-03 02:36:08.59945844 +0000 UTC m=+519.598510971 I0903 02:36:08.735898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zjrjq" condition "Ready" to 2026-09-03 02:36:08.735881066 +0000 UTC m=+519.734933587 E0903 02:36:09.013238 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-t264k\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0903 02:36:09.267603 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-zjrjq" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-sbvl7" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0903 02:36:09.378776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9cpbd" condition "Approved" to 2026-09-03 02:36:09.378751453 +0000 UTC m=+520.377803974 I0903 02:36:09.643992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9cpbd" condition "Ready" to 2026-09-03 02:36:09.643977771 +0000 UTC m=+520.643030272 I0903 02:36:09.921918 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:09.921830787 +0000 UTC m=+520.920883308 I0903 02:36:10.023239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:10.023961 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:10.023948248 +0000 UTC m=+521.023000779 I0903 02:36:10.229085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:15.965639 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" condition "Ready" to 2026-09-03 02:36:15.96560969 +0000 UTC m=+526.964662221 I0903 02:36:15.966023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:36:15.966108 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" condition "Issuing" to 2026-09-03 02:36:15.966073297 +0000 UTC m=+526.965125828 I0903 02:36:15.987957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-grrf5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:15.988211 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" condition "Ready" to 2026-09-03 02:36:15.988198149 +0000 UTC m=+526.987250670 I0903 02:36:16.248121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-grrf5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:16.295330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-grrf5-m2xz9" condition "Approved" to 2026-09-03 02:36:16.295311144 +0000 UTC m=+527.294363635 I0903 02:36:16.321273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-grrf5-m2xz9" condition "Ready" to 2026-09-03 02:36:16.321261592 +0000 UTC m=+527.320314093 I0903 02:36:16.487246 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:16.487228023 +0000 UTC m=+527.486280514 I0903 02:36:16.509507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-grrf5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:16.509884 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:16.509873993 +0000 UTC m=+527.508926494 I0903 02:36:16.529872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-grrf5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-grrf5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:29.509607 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-03 02:36:29.509589169 +0000 UTC m=+540.508641670 I0903 02:36:29.509608 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:36:29.509858 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-03 02:36:29.509855164 +0000 UTC m=+540.508907655 I0903 02:36:29.523085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:29.523179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:36:29.523200 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-03 02:36:29.523194842 +0000 UTC m=+540.522247333 I0903 02:36:29.716495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xx7ml" condition "Approved" to 2026-09-03 02:36:29.716477173 +0000 UTC m=+540.715529674 I0903 02:36:29.742831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xx7ml" condition "Ready" to 2026-09-03 02:36:29.742817544 +0000 UTC m=+540.741870045 I0903 02:36:29.779605 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:29.779590992 +0000 UTC m=+540.778643493 I0903 02:36:29.797707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:36:29.799062 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:36:29.799050404 +0000 UTC m=+540.798102895 I0903 02:36:29.820026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:40:21.010154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:40:21.010246 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-03 02:40:21.010230579 +0000 UTC m=+772.009283100 I0903 02:40:21.010271 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-03 02:40:21.01024444 +0000 UTC m=+772.009296971 I0903 02:40:21.036413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:40:21.036516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:40:21.036572 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-03 02:40:21.036560958 +0000 UTC m=+772.035613479 I0903 02:40:21.357959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:40:21.369109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9mz2v" condition "Approved" to 2026-09-03 02:40:21.369093536 +0000 UTC m=+772.368146057 I0903 02:40:21.389329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9mz2v" condition "Ready" to 2026-09-03 02:40:21.389316538 +0000 UTC m=+772.388369059 I0903 02:40:21.429768 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:40:21.429749808 +0000 UTC m=+772.428802289 I0903 02:40:21.462653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:40:21.514514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:41:05.991553 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:41:05.992385 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-03 02:41:05.99163783 +0000 UTC m=+816.990690361 I0903 02:41:05.993374 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-03 02:41:05.993352337 +0000 UTC m=+816.992419839 I0903 02:41:06.014657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:41:06.014754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 02:41:06.014782 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-03 02:41:06.014773802 +0000 UTC m=+817.013826313 I0903 02:41:06.212845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:41:06.219843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-729zk" condition "Approved" to 2026-09-03 02:41:06.21982997 +0000 UTC m=+817.218882491 I0903 02:41:06.254559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-729zk" condition "Ready" to 2026-09-03 02:41:06.254543893 +0000 UTC m=+817.253596394 I0903 02:41:06.287950 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 02:41:06.287932282 +0000 UTC m=+817.286984763 I0903 02:41:06.336004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 02:41:06.383595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"