I0918 22:57:07.419242 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0918 22:57:07.419446 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 22:57:07.419554 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 22:57:07.424905 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 22:57:07.425357 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0918 22:57:07.425431 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 22:57:07.425532 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 22:57:07.428103 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 22:57:07.444233 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 22:57:07.450454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 22:57:07.454463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 22:57:07.457671 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 22:57:07.457813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 22:57:07.460826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 22:57:07.465049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 22:57:07.467882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 22:57:07.470464 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 22:57:07.473179 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 22:57:07.475541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0918 22:57:07.478151 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 22:57:07.478271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 22:57:07.481057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 22:57:07.484050 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 22:57:07.484145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 22:57:07.489864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 22:57:07.494061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 22:57:07.497822 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 22:57:07.497881 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 22:57:07.502025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 22:57:07.504300 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 22:57:07.506360 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 22:57:07.506382 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 22:57:07.506393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 22:57:07.509289 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.509926 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.511748 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.543051 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.553426 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.570246 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.593397 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.612140 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.613167 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:07.627587 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 22:57:20.385520 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 22:57:20.385500048 +0000 UTC m=+13.004550931 I0918 22:57:21.067489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 22:57:21.067672 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 22:57:21.067658857 +0000 UTC m=+13.686709740 I0918 22:57:21.068852 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 22:57:21.06884318 +0000 UTC m=+13.687894073 E0918 22:57:21.084737 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 22:57:21.084821 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 22:57:21.084811763 +0000 UTC m=+13.703862646 E0918 22:57:21.084911 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 22:57:21.090488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 22:57:21.090843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 22:57:21.090952 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 22:57:21.09093911 +0000 UTC m=+13.709989993 E0918 22:57:21.099554 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0918 22:57:21.099648 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 22:57:21.099680 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 22:57:21.099765 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 22:57:21.150911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-czmtg" condition "Approved" to 2026-09-18 22:57:21.150878029 +0000 UTC m=+13.769928882 I0918 22:57:21.169543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-czmtg" condition "Ready" to 2026-09-18 22:57:21.169533084 +0000 UTC m=+13.788583937 I0918 22:57:21.195255 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 22:57:21.195243192 +0000 UTC m=+13.814294055 I0918 22:57:21.212196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 22:57:21.212576 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 22:57:21.212568442 +0000 UTC m=+13.831619305 I0918 22:57:21.238644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 22:57:26.100995 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 22:57:26.100975627 +0000 UTC m=+18.720026510 I0918 22:57:51.013845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 22:57:51.013880 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 22:57:51.01387305 +0000 UTC m=+43.632923913 I0918 22:57:51.018785 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 22:57:51.018765243 +0000 UTC m=+43.637816106 I0918 22:57:51.028244 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 22:57:51.028232336 +0000 UTC m=+43.647283189 I0918 22:57:51.094012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 22:57:51.094059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 22:57:51.094073 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 22:57:51.09406766 +0000 UTC m=+43.713118513 I0918 22:57:51.371282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9q7pr" condition "Approved" to 2026-09-18 22:57:51.371271904 +0000 UTC m=+43.990322757 I0918 22:57:51.415250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9q7pr" condition "Ready" to 2026-09-18 22:57:51.415239988 +0000 UTC m=+44.034290851 I0918 22:57:51.449873 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 22:57:51.449864601 +0000 UTC m=+44.068915454 I0918 22:57:51.474308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 22:57:51.474661 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 22:57:51.474655165 +0000 UTC m=+44.093706018 I0918 22:57:51.481313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 22:57:51.496198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:03:06.562790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-79.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:03:06.562847 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Issuing" to 2026-09-18 23:03:06.562833041 +0000 UTC m=+359.181883944 I0918 23:03:06.563032 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Ready" to 2026-09-18 23:03:06.563022316 +0000 UTC m=+359.182073169 I0918 23:03:06.582688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-79.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-79.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:03:06.582764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-79.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:03:06.582788 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Issuing" to 2026-09-18 23:03:06.582781426 +0000 UTC m=+359.201832289 I0918 23:03:06.815988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-79.nip.io-tls-299td" condition "Approved" to 2026-09-18 23:03:06.815969729 +0000 UTC m=+359.435020612 I0918 23:03:06.849489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-79.nip.io-tls-299td" condition "Ready" to 2026-09-18 23:03:06.849471944 +0000 UTC m=+359.468522827 I0918 23:03:06.886667 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:03:06.886650033 +0000 UTC m=+359.505700896 I0918 23:03:06.909128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-79.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-79.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:03:06.909455 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:03:06.909447143 +0000 UTC m=+359.528498006 I0918 23:03:06.934428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-79.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-79.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:04:16.725617 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:04:16.725647 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 23:04:16.725641555 +0000 UTC m=+429.344692408 I0918 23:04:16.725658 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 23:04:16.725646185 +0000 UTC m=+429.344697068 E0918 23:04:16.738996 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 23:04:16.739075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:04:16.739137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:04:16.739162 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 23:04:16.73915609 +0000 UTC m=+429.358206973 I0918 23:04:16.739049 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 23:04:16.739037908 +0000 UTC m=+429.358088801 E0918 23:04:16.739476 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 23:04:16.758813 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0918 23:04:16.758922 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 23:04:16.758961 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 23:04:16.758998 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0918 23:04:16.791991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kzqf9" condition "Approved" to 2026-09-18 23:04:16.791975197 +0000 UTC m=+429.411026090 I0918 23:04:16.809528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kzqf9" condition "Ready" to 2026-09-18 23:04:16.809488777 +0000 UTC m=+429.428539670 I0918 23:04:16.837094 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:04:16.837074138 +0000 UTC m=+429.456125111 I0918 23:04:16.857291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:04:16.857704 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:04:16.857695227 +0000 UTC m=+429.476746110 I0918 23:04:16.862012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:04:16.882536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:04:21.759974 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:04:21.759916678 +0000 UTC m=+434.378967561 I0918 23:05:04.908985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:05:04.909066 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 23:05:04.909056553 +0000 UTC m=+477.528107446 I0918 23:05:04.909476 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 23:05:04.90946854 +0000 UTC m=+477.528519423 I0918 23:05:04.948364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:05:04.948409 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 23:05:04.948399398 +0000 UTC m=+477.567450251 I0918 23:05:04.949205 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 23:05:04.949197552 +0000 UTC m=+477.568248415 I0918 23:05:04.957293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:05:04.957331 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 23:05:04.957324602 +0000 UTC m=+477.576375455 I0918 23:05:04.959535 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 23:05:04.959528149 +0000 UTC m=+477.578579002 I0918 23:05:04.965403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:04.965566 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 23:05:04.965481212 +0000 UTC m=+477.584532065 I0918 23:05:04.985915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:04.985999 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 23:05:04.985989864 +0000 UTC m=+477.605040717 I0918 23:05:04.999525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:05.001527 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 23:05:05.00151922 +0000 UTC m=+477.620570083 I0918 23:05:05.179371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:05.224941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vt8cm" condition "Approved" to 2026-09-18 23:05:05.224927849 +0000 UTC m=+477.843978702 I0918 23:05:05.260352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vt8cm" condition "Ready" to 2026-09-18 23:05:05.260160763 +0000 UTC m=+477.879211616 I0918 23:05:05.308732 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:05:05.308716455 +0000 UTC m=+477.927767308 I0918 23:05:05.344015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:05.344532 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:05:05.344523689 +0000 UTC m=+477.963574532 I0918 23:05:05.369192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:05.378459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:05.378800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:05.387370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:05.420014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8mjsl" condition "Approved" to 2026-09-18 23:05:05.419999113 +0000 UTC m=+478.039049966 I0918 23:05:05.420339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cfbf6" condition "Approved" to 2026-09-18 23:05:05.420327248 +0000 UTC m=+478.039378091 I0918 23:05:05.442713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cfbf6" condition "Ready" to 2026-09-18 23:05:05.442700592 +0000 UTC m=+478.061751435 I0918 23:05:05.444629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8mjsl" condition "Ready" to 2026-09-18 23:05:05.444624835 +0000 UTC m=+478.063675688 I0918 23:05:06.039758 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:05:06.039747443 +0000 UTC m=+478.658798296 I0918 23:05:06.091770 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:05:06.091746883 +0000 UTC m=+478.710797776 I0918 23:05:06.265804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:06.278508 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:05:06.278493669 +0000 UTC m=+478.897544522 I0918 23:05:06.371453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:06.371923 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:05:06.371915457 +0000 UTC m=+478.990966320 I0918 23:05:06.746621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:06.842302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:06.889637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:06.942810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:11.414448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:05:11.414767 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls" condition "Issuing" to 2026-09-18 23:05:11.414757754 +0000 UTC m=+484.033808627 I0918 23:05:11.414955 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls" condition "Ready" to 2026-09-18 23:05:11.414947287 +0000 UTC m=+484.033998150 I0918 23:05:11.434066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:11.434214 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls" condition "Ready" to 2026-09-18 23:05:11.434206914 +0000 UTC m=+484.053257767 I0918 23:05:11.552396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:11.600135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2m8xr-pspbp" condition "Approved" to 2026-09-18 23:05:11.600121399 +0000 UTC m=+484.219172252 I0918 23:05:11.630464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2m8xr-pspbp" condition "Ready" to 2026-09-18 23:05:11.630452784 +0000 UTC m=+484.249503647 I0918 23:05:11.673553 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:05:11.673543225 +0000 UTC m=+484.292594068 I0918 23:05:11.698956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2m8xr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:26.952035 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 23:05:26.952023946 +0000 UTC m=+499.571074799 I0918 23:05:26.953354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:05:26.953372 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 23:05:26.953369368 +0000 UTC m=+499.572420221 I0918 23:05:26.972806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:26.972852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:05:26.972866 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 23:05:26.972861361 +0000 UTC m=+499.591912214 I0918 23:05:27.233318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:05:27.256760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qt8k6" condition "Approved" to 2026-09-18 23:05:27.256747722 +0000 UTC m=+499.875798575 I0918 23:05:27.275970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qt8k6" condition "Ready" to 2026-09-18 23:05:27.275959549 +0000 UTC m=+499.895010402 I0918 23:05:27.308440 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:05:27.308428316 +0000 UTC m=+499.927479169 I0918 23:05:27.333460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:08:34.940533 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:08:34.940597 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 23:08:34.940590685 +0000 UTC m=+687.559641548 I0918 23:08:34.940585 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 23:08:34.940574315 +0000 UTC m=+687.559625178 I0918 23:08:34.957200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:08:34.957298 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 23:08:34.957289762 +0000 UTC m=+687.576340625 I0918 23:08:35.170993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:08:35.210762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-448rl" condition "Approved" to 2026-09-18 23:08:35.210747952 +0000 UTC m=+687.829798815 I0918 23:08:35.239725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-448rl" condition "Ready" to 2026-09-18 23:08:35.239715812 +0000 UTC m=+687.858766685 I0918 23:08:35.273627 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:08:35.273615733 +0000 UTC m=+687.892666586 I0918 23:08:35.300909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:08:35.301190 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:08:35.301184003 +0000 UTC m=+687.920234876 I0918 23:08:35.325697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:08:35.325992 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:08:35.325985274 +0000 UTC m=+687.945036137 I0918 23:09:16.078433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 23:09:16.078465 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 23:09:16.07845774 +0000 UTC m=+728.697508583 I0918 23:09:16.078663 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 23:09:16.078659657 +0000 UTC m=+728.697710500 I0918 23:09:16.097512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:09:16.097580 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 23:09:16.097573548 +0000 UTC m=+728.716624411 I0918 23:09:16.248907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:09:16.288776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rflfs" condition "Approved" to 2026-09-18 23:09:16.288761715 +0000 UTC m=+728.907812588 I0918 23:09:16.313644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rflfs" condition "Ready" to 2026-09-18 23:09:16.313631663 +0000 UTC m=+728.932682536 I0918 23:09:16.339543 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:09:16.339536209 +0000 UTC m=+728.958587052 I0918 23:09:16.361838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 23:09:16.362126 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 23:09:16.36211957 +0000 UTC m=+728.981170423 I0918 23:09:16.384778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"