I0915 11:21:10.039934 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0915 11:21:10.040075 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0915 11:21:10.040160 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0915 11:21:10.044412 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0915 11:21:10.044823 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0915 11:21:10.045001 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0915 11:21:10.045129 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0915 11:21:10.047642 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0915 11:21:10.062270 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0915 11:21:10.070364 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0915 11:21:10.075939 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0915 11:21:10.075982 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0915 11:21:10.076195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0915 11:21:10.079868 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0915 11:21:10.083409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0915 11:21:10.086863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0915 11:21:10.089781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0915 11:21:10.095049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0915 11:21:10.097814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0915 11:21:10.099812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0915 11:21:10.101730 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0915 11:21:10.103666 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0915 11:21:10.103806 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0915 11:21:10.106058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0915 11:21:10.108078 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0915 11:21:10.110326 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0915 11:21:10.112226 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0915 11:21:10.112246 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0915 11:21:10.112254 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0915 11:21:10.112518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0915 11:21:10.118691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0915 11:21:10.120924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0915 11:21:10.123258 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0915 11:21:10.125906 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.126320 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.126339 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.126398 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.151647 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.167433 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.180598 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.193273 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.211729 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:10.221322 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:21:20.672474 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-15 11:21:20.6724551 +0000 UTC m=+10.690521993 I0915 11:21:21.326589 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 11:21:21.326574247 +0000 UTC m=+11.344641140 I0915 11:21:21.326197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:21:21.327068 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-15 11:21:21.327055856 +0000 UTC m=+11.345122749 E0915 11:21:21.348288 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:21:21.348395 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-15 11:21:21.348381788 +0000 UTC m=+11.366448681 E0915 11:21:21.348592 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:21:21.349917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:21:21.350016 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:21:21.350059 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-15 11:21:21.35005005 +0000 UTC m=+11.368116943 E0915 11:21:21.367739 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0915 11:21:21.367941 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:21:21.368009 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:21:21.368079 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0915 11:21:21.409017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-plf2p" condition "Approved" to 2026-09-15 11:21:21.409002521 +0000 UTC m=+11.427069414 I0915 11:21:21.423293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-plf2p" condition "Ready" to 2026-09-15 11:21:21.423283468 +0000 UTC m=+11.441350331 I0915 11:21:21.443480 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:21:21.443459728 +0000 UTC m=+11.461526621 I0915 11:21:21.463269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:21:26.368661 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:21:26.368647003 +0000 UTC m=+16.386713896 I0915 11:21:48.151876 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-15 11:21:48.151854958 +0000 UTC m=+38.169921821 I0915 11:21:48.154031 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:21:48.154055 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 11:21:48.154051355 +0000 UTC m=+38.172118218 I0915 11:21:48.168053 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-15 11:21:48.168038872 +0000 UTC m=+38.186105735 I0915 11:21:48.179873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:21:48.180044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:21:48.180129 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 11:21:48.180119718 +0000 UTC m=+38.198186591 I0915 11:21:48.380495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:21:48.394380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-brdx9" condition "Approved" to 2026-09-15 11:21:48.394368106 +0000 UTC m=+38.412435009 I0915 11:21:48.427857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-brdx9" condition "Ready" to 2026-09-15 11:21:48.427843054 +0000 UTC m=+38.445909947 I0915 11:21:48.458005 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:21:48.457992916 +0000 UTC m=+38.476059769 I0915 11:21:48.481744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:21:48.482137 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:21:48.482127047 +0000 UTC m=+38.500193930 I0915 11:21:48.497533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:21:48.507947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:26:49.284631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-119.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:26:49.284659 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-119.nip.io-tls" condition "Issuing" to 2026-09-15 11:26:49.284653336 +0000 UTC m=+339.302720199 I0915 11:26:49.284745 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-119.nip.io-tls" condition "Ready" to 2026-09-15 11:26:49.284729138 +0000 UTC m=+339.302796041 I0915 11:26:49.312242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-119.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-119.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:26:49.312594 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-119.nip.io-tls" condition "Ready" to 2026-09-15 11:26:49.312585108 +0000 UTC m=+339.330651981 I0915 11:26:49.444624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-119.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-119.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:26:49.478460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-119.nip.io-tls-lvvxl" condition "Approved" to 2026-09-15 11:26:49.478444299 +0000 UTC m=+339.496511202 I0915 11:26:49.514337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-119.nip.io-tls-lvvxl" condition "Ready" to 2026-09-15 11:26:49.514320879 +0000 UTC m=+339.532387772 I0915 11:26:49.546016 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-119.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:26:49.545996387 +0000 UTC m=+339.564063290 I0915 11:26:49.571588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-119.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-119.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:26:49.572540 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-119.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:26:49.572529382 +0000 UTC m=+339.590596275 I0915 11:26:49.597116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-119.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-119.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:27:55.532068 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-15 11:27:55.532049815 +0000 UTC m=+405.550116708 I0915 11:27:55.532622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:27:55.532751 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 11:27:55.532732281 +0000 UTC m=+405.550799194 E0915 11:27:55.548947 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:27:55.549005 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-15 11:27:55.54899204 +0000 UTC m=+405.567058933 E0915 11:27:55.549276 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:27:55.554117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:27:55.554343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:27:55.554430 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 11:27:55.554417623 +0000 UTC m=+405.572484526 E0915 11:27:55.565476 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0915 11:27:55.565577 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:27:55.565630 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:27:55.565862 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0915 11:27:55.600941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fnddt" condition "Approved" to 2026-09-15 11:27:55.600924499 +0000 UTC m=+405.618991402 I0915 11:27:55.619400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fnddt" condition "Ready" to 2026-09-15 11:27:55.619383448 +0000 UTC m=+405.637450351 I0915 11:27:55.654019 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:27:55.654005824 +0000 UTC m=+405.672072687 I0915 11:27:55.671536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:27:55.671892 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:27:55.671884989 +0000 UTC m=+405.689951862 I0915 11:27:55.685382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:00.566169 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:00.566156904 +0000 UTC m=+410.584223807 I0915 11:28:42.866481 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-15 11:28:42.866473014 +0000 UTC m=+452.884539877 I0915 11:28:42.872817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:28:42.872838 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-15 11:28:42.872834429 +0000 UTC m=+452.890901292 I0915 11:28:42.873196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:28:42.873210 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-15 11:28:42.873207376 +0000 UTC m=+452.891274239 I0915 11:28:42.875085 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-15 11:28:42.875080837 +0000 UTC m=+452.893147700 I0915 11:28:42.878774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:28:42.878792 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-15 11:28:42.878788734 +0000 UTC m=+452.896855597 I0915 11:28:42.879223 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-15 11:28:42.879219144 +0000 UTC m=+452.897285997 I0915 11:28:42.927041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:42.927091 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-15 11:28:42.927085534 +0000 UTC m=+452.945152387 I0915 11:28:42.927480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:42.927508 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-15 11:28:42.927503203 +0000 UTC m=+452.945570066 I0915 11:28:42.932215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:42.932401 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-15 11:28:42.932391986 +0000 UTC m=+452.950458869 I0915 11:28:43.220628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:43.227580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:43.246239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6bs5n" condition "Approved" to 2026-09-15 11:28:43.246227386 +0000 UTC m=+453.264294259 I0915 11:28:43.258510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6xq7j" condition "Approved" to 2026-09-15 11:28:43.258499004 +0000 UTC m=+453.276565867 I0915 11:28:43.277862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6bs5n" condition "Ready" to 2026-09-15 11:28:43.277851932 +0000 UTC m=+453.295918795 I0915 11:28:43.283820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:43.301427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6xq7j" condition "Ready" to 2026-09-15 11:28:43.301413589 +0000 UTC m=+453.319480452 I0915 11:28:43.342191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ckxct" condition "Approved" to 2026-09-15 11:28:43.342182588 +0000 UTC m=+453.360249451 I0915 11:28:43.349414 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:43.34940606 +0000 UTC m=+453.367472923 I0915 11:28:43.465412 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:43.465398536 +0000 UTC m=+453.483465409 I0915 11:28:43.502443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:43.502850 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:43.502843296 +0000 UTC m=+453.520910169 I0915 11:28:43.559610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ckxct" condition "Ready" to 2026-09-15 11:28:43.559601512 +0000 UTC m=+453.577668375 I0915 11:28:43.757458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:43.757936 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:43.757929405 +0000 UTC m=+453.775996278 I0915 11:28:44.008987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:44.213661 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:44.213643648 +0000 UTC m=+454.231710551 I0915 11:28:44.252690 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:44.252674379 +0000 UTC m=+454.270741272 I0915 11:28:44.354483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:44.402164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:44.456388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:44.552101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:44.552595 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:44.552584185 +0000 UTC m=+454.570651078 I0915 11:28:44.802400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:51.667394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:28:51.667423 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" condition "Issuing" to 2026-09-15 11:28:51.667416661 +0000 UTC m=+461.685483514 I0915 11:28:51.667691 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" condition "Ready" to 2026-09-15 11:28:51.667586275 +0000 UTC m=+461.685653128 I0915 11:28:51.685415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:51.685464 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" condition "Ready" to 2026-09-15 11:28:51.685459458 +0000 UTC m=+461.703526321 I0915 11:28:51.865015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:51.904557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x2d7f-88wvg" condition "Approved" to 2026-09-15 11:28:51.904542001 +0000 UTC m=+461.922608874 I0915 11:28:51.932790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x2d7f-88wvg" condition "Ready" to 2026-09-15 11:28:51.93278081 +0000 UTC m=+461.950847673 I0915 11:28:51.967995 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:51.967982405 +0000 UTC m=+461.986049268 I0915 11:28:51.989881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:51.990112 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:51.990104196 +0000 UTC m=+462.008171069 I0915 11:28:52.007780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:52.011438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:28:52.011621 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2d7f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:28:52.011615035 +0000 UTC m=+462.029681898 I0915 11:29:06.009877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:29:06.009903 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-15 11:29:06.009897076 +0000 UTC m=+476.027963939 I0915 11:29:06.009958 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-15 11:29:06.009939127 +0000 UTC m=+476.028006040 I0915 11:29:06.026760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:29:06.026878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:29:06.026909 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-15 11:29:06.026899374 +0000 UTC m=+476.044966227 I0915 11:29:06.303675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wqppt" condition "Approved" to 2026-09-15 11:29:06.303653639 +0000 UTC m=+476.321720532 I0915 11:29:06.338300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wqppt" condition "Ready" to 2026-09-15 11:29:06.338290029 +0000 UTC m=+476.356356892 I0915 11:29:06.390220 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:29:06.390194203 +0000 UTC m=+476.408261056 I0915 11:29:06.426351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:26.004085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:32:26.004166 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-15 11:32:26.004156055 +0000 UTC m=+676.022222958 I0915 11:32:26.004158 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 11:32:26.004136204 +0000 UTC m=+676.022203147 I0915 11:32:26.023455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:26.024989 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 11:32:26.023547072 +0000 UTC m=+676.041613965 I0915 11:32:26.421713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:26.455104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-47mwm" condition "Approved" to 2026-09-15 11:32:26.455082151 +0000 UTC m=+676.473149024 I0915 11:32:26.478242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-47mwm" condition "Ready" to 2026-09-15 11:32:26.478229031 +0000 UTC m=+676.496295934 I0915 11:32:26.511014 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:32:26.511003986 +0000 UTC m=+676.529070849 I0915 11:32:26.532217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:26.532524 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:32:26.532518373 +0000 UTC m=+676.550585236 I0915 11:32:26.541525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:26.554486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:06.037613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:06.037653 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-15 11:33:06.037643408 +0000 UTC m=+716.055710281 I0915 11:33:06.037689 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-15 11:33:06.037680969 +0000 UTC m=+716.055747842 I0915 11:33:06.056053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:06.056215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:06.056263 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-15 11:33:06.056254897 +0000 UTC m=+716.074321760 I0915 11:33:06.311410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9p7zl" condition "Approved" to 2026-09-15 11:33:06.311400178 +0000 UTC m=+716.329467051 I0915 11:33:06.343502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9p7zl" condition "Ready" to 2026-09-15 11:33:06.343136531 +0000 UTC m=+716.361203424 I0915 11:33:06.380648 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:06.380637208 +0000 UTC m=+716.398704081 I0915 11:33:06.403120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"