I0918 01:25:25.666705 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0918 01:25:25.666884 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 01:25:25.667030 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 01:25:25.674980 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 01:25:25.675419 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 01:25:25.675442 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0918 01:25:25.675522 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 01:25:25.679315 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 01:25:25.698292 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 01:25:25.704996 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 01:25:25.709768 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 01:25:25.715847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 01:25:25.720381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 01:25:25.724603 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 01:25:25.724639 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 01:25:25.724747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 01:25:25.728563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 01:25:25.732329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 01:25:25.736131 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 01:25:25.739660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 01:25:25.743241 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 01:25:25.748732 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 01:25:25.748772 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 01:25:25.748788 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 01:25:25.748850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 01:25:25.752645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 01:25:25.756167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 01:25:25.759779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 01:25:25.763506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 01:25:25.767119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0918 01:25:25.770828 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 01:25:25.774142 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 01:25:25.774478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 01:25:25.778999 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.780420 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.782536 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.784369 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.811168 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.832078 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.857301 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.870882 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.891722 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:25.908591 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:25:37.504967 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 01:25:37.504940512 +0000 UTC m=+11.874692579 I0918 01:25:38.218582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:25:38.218662 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 01:25:38.218652582 +0000 UTC m=+12.588404639 I0918 01:25:38.218945 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 01:25:38.218925978 +0000 UTC m=+12.588678035 I0918 01:25:38.237390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:25:38.237469 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 01:25:38.237458837 +0000 UTC m=+12.607210894 E0918 01:25:38.238194 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:25:38.238286 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 01:25:38.238257056 +0000 UTC m=+12.608009123 E0918 01:25:38.238324 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:25:38.259694 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 01:25:38.259913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0918 01:25:38.261428 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:25:38.261505 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:25:38.261548 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 01:25:38.292149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kd87b" condition "Approved" to 2026-09-18 01:25:38.292124116 +0000 UTC m=+12.661876183 I0918 01:25:38.308868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kd87b" condition "Ready" to 2026-09-18 01:25:38.308847665 +0000 UTC m=+12.678599722 I0918 01:25:38.338435 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:25:38.338418654 +0000 UTC m=+12.708170721 I0918 01:25:38.360488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:25:38.360867 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:25:38.360857803 +0000 UTC m=+12.730609870 I0918 01:25:38.369396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:25:38.377721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:25:38.377898 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:25:38.37789088 +0000 UTC m=+12.747642917 I0918 01:25:43.261447 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:25:43.261427948 +0000 UTC m=+17.631180005 I0918 01:26:06.946905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:26:06.946958 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 01:26:06.946949173 +0000 UTC m=+41.316701230 I0918 01:26:06.947145 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 01:26:06.947120107 +0000 UTC m=+41.316872204 I0918 01:26:06.960173 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 01:26:06.960156697 +0000 UTC m=+41.329908754 I0918 01:26:06.990284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:26:06.997300 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 01:26:06.997287478 +0000 UTC m=+41.367039505 I0918 01:26:07.155600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:26:07.185161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-n8288" condition "Approved" to 2026-09-18 01:26:07.185151229 +0000 UTC m=+41.554903256 I0918 01:26:07.214883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-n8288" condition "Ready" to 2026-09-18 01:26:07.214869735 +0000 UTC m=+41.584621772 I0918 01:26:07.244466 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:26:07.244453158 +0000 UTC m=+41.614205195 I0918 01:26:07.279581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:30:53.516672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-50.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:30:53.516771 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-50.nip.io-tls" condition "Ready" to 2026-09-18 01:30:53.516756745 +0000 UTC m=+327.886508802 I0918 01:30:53.516913 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-50.nip.io-tls" condition "Issuing" to 2026-09-18 01:30:53.516889609 +0000 UTC m=+327.886641646 I0918 01:30:53.537278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-50.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-50.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:30:53.537533 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-50.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:30:53.537590 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-50.nip.io-tls" condition "Issuing" to 2026-09-18 01:30:53.537569132 +0000 UTC m=+327.907321169 I0918 01:30:53.881928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-50.nip.io-tls-tk4f5" condition "Approved" to 2026-09-18 01:30:53.881896562 +0000 UTC m=+328.251648619 I0918 01:30:53.915460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-50.nip.io-tls-tk4f5" condition "Ready" to 2026-09-18 01:30:53.915446668 +0000 UTC m=+328.285198725 I0918 01:30:53.943410 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-50.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:30:53.94334681 +0000 UTC m=+328.313098867 I0918 01:30:53.974614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-50.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-50.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:00.422234 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 01:32:00.42217534 +0000 UTC m=+394.791927397 I0918 01:32:00.422796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:00.422828 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 01:32:00.422821208 +0000 UTC m=+394.792573275 E0918 01:32:00.439702 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:32:00.439812 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 01:32:00.439798574 +0000 UTC m=+394.809550641 E0918 01:32:00.439864 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:32:00.442098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:00.442188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:00.442227 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 01:32:00.442217239 +0000 UTC m=+394.811969316 E0918 01:32:00.451633 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0918 01:32:00.451681 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:32:00.451699 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:32:00.451721 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0918 01:32:00.492042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:00.495817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rqft9" condition "Approved" to 2026-09-18 01:32:00.495796248 +0000 UTC m=+394.865548315 I0918 01:32:00.513437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rqft9" condition "Ready" to 2026-09-18 01:32:00.513427932 +0000 UTC m=+394.883179949 I0918 01:32:00.538005 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:00.537983921 +0000 UTC m=+394.907735978 I0918 01:32:00.557655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:00.596285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:05.452510 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:05.452497319 +0000 UTC m=+399.822249386 I0918 01:32:47.508289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:47.508322 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 01:32:47.508314932 +0000 UTC m=+441.878066959 I0918 01:32:47.508462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:47.508468 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 01:32:47.508451315 +0000 UTC m=+441.878203342 I0918 01:32:47.508499 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 01:32:47.508491986 +0000 UTC m=+441.878244053 I0918 01:32:47.515930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:47.515979 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 01:32:47.515972994 +0000 UTC m=+441.885725021 I0918 01:32:47.517163 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 01:32:47.517158554 +0000 UTC m=+441.886910581 I0918 01:32:47.518005 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 01:32:47.507742397 +0000 UTC m=+441.877494424 I0918 01:32:47.546997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:47.547508 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 01:32:47.547500989 +0000 UTC m=+441.917253006 I0918 01:32:47.560981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:47.561049 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 01:32:47.561042831 +0000 UTC m=+441.930794858 I0918 01:32:47.567722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:47.567783 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 01:32:47.56777781 +0000 UTC m=+441.937529837 I0918 01:32:47.811944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:47.930777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rmntv" condition "Approved" to 2026-09-18 01:32:47.930766278 +0000 UTC m=+442.300518305 I0918 01:32:47.949596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:47.952435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rmntv" condition "Ready" to 2026-09-18 01:32:47.952428314 +0000 UTC m=+442.322180341 I0918 01:32:47.980125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qcn4z" condition "Approved" to 2026-09-18 01:32:47.980116512 +0000 UTC m=+442.349868539 I0918 01:32:47.993192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qcn4z" condition "Ready" to 2026-09-18 01:32:47.993187521 +0000 UTC m=+442.362939548 I0918 01:32:48.038928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:48.039301 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:48.039289792 +0000 UTC m=+442.409041819 I0918 01:32:48.084475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:48.084867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-d5w98" condition "Approved" to 2026-09-18 01:32:48.08486141 +0000 UTC m=+442.454613427 I0918 01:32:48.133686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-d5w98" condition "Ready" to 2026-09-18 01:32:48.133675888 +0000 UTC m=+442.503427915 I0918 01:32:48.589130 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-rmntv" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-42fcx" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0918 01:32:48.807987 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:48.807970571 +0000 UTC m=+443.177722638 I0918 01:32:49.045744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:49.046161 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:49.046151605 +0000 UTC m=+443.415903662 I0918 01:32:49.100872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xtrnh" condition "Approved" to 2026-09-18 01:32:49.10085125 +0000 UTC m=+443.470603307 I0918 01:32:49.150719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:49.458545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xtrnh" condition "Ready" to 2026-09-18 01:32:49.458529294 +0000 UTC m=+443.828281351 I0918 01:32:49.694428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:49.943817 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:49.943798285 +0000 UTC m=+444.313550342 I0918 01:32:50.043866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:50.044547 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:50.044537256 +0000 UTC m=+444.414289313 I0918 01:32:50.297199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:50.343359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:56.095811 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls" condition "Ready" to 2026-09-18 01:32:56.095792074 +0000 UTC m=+450.465544141 I0918 01:32:56.096439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:56.096500 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls" condition "Issuing" to 2026-09-18 01:32:56.096485142 +0000 UTC m=+450.466237209 I0918 01:32:56.116574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:56.116694 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls" condition "Ready" to 2026-09-18 01:32:56.116684306 +0000 UTC m=+450.486436363 I0918 01:32:56.330937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:56.366806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ngjz6-7wn2k" condition "Approved" to 2026-09-18 01:32:56.366793295 +0000 UTC m=+450.736545332 I0918 01:32:56.445135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ngjz6-7wn2k" condition "Ready" to 2026-09-18 01:32:56.4451244 +0000 UTC m=+450.814876437 I0918 01:32:56.478488 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:56.478476172 +0000 UTC m=+450.848228209 I0918 01:32:56.498364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngjz6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:33:09.313795 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 01:33:09.313780861 +0000 UTC m=+463.683532888 I0918 01:33:09.314094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:33:09.314132 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 01:33:09.314128909 +0000 UTC m=+463.683880936 I0918 01:33:09.326804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:33:09.326849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:33:09.326864 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 01:33:09.326859762 +0000 UTC m=+463.696611779 I0918 01:33:09.565489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:33:09.573330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4jdbk" condition "Approved" to 2026-09-18 01:33:09.573323478 +0000 UTC m=+463.943075505 I0918 01:33:09.593731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4jdbk" condition "Ready" to 2026-09-18 01:33:09.59372251 +0000 UTC m=+463.963474537 I0918 01:33:09.646128 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:33:09.646117219 +0000 UTC m=+464.015869236 I0918 01:33:09.673827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:33:09.714672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:36:33.385143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:36:33.385187 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 01:36:33.385175837 +0000 UTC m=+667.754927894 I0918 01:36:33.385210 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 01:36:33.385187267 +0000 UTC m=+667.754939354 I0918 01:36:33.414468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:36:33.414566 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 01:36:33.414556287 +0000 UTC m=+667.784308354 I0918 01:36:33.780603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:36:33.818082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qhmkm" condition "Approved" to 2026-09-18 01:36:33.818069579 +0000 UTC m=+668.187821646 I0918 01:36:33.842854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qhmkm" condition "Ready" to 2026-09-18 01:36:33.842822576 +0000 UTC m=+668.212574633 I0918 01:36:33.877455 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:36:33.877433132 +0000 UTC m=+668.247185159 I0918 01:36:33.902041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:36:33.958076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:37:19.761023 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 01:37:19.760983278 +0000 UTC m=+714.130735345 I0918 01:37:19.761049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:37:19.761120 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 01:37:19.761110613 +0000 UTC m=+714.130862670 I0918 01:37:19.791303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:37:19.791394 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 01:37:19.791383963 +0000 UTC m=+714.161136030 I0918 01:37:20.027132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:37:20.070108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tp2nj" condition "Approved" to 2026-09-18 01:37:20.070094206 +0000 UTC m=+714.439846263 I0918 01:37:20.087802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tp2nj" condition "Ready" to 2026-09-18 01:37:20.087735792 +0000 UTC m=+714.457487849 I0918 01:37:20.119701 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:37:20.119690469 +0000 UTC m=+714.489442506 I0918 01:37:20.143764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:37:20.144327 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:37:20.144319654 +0000 UTC m=+714.514071681 I0918 01:37:20.177388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:37:20.177688 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:37:20.177681299 +0000 UTC m=+714.547433336