I0822 10:34:20.792531 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0822 10:34:20.792695 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0822 10:34:20.792788 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0822 10:34:20.801838 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0822 10:34:20.802317 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0822 10:34:20.802329 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0822 10:34:20.802425 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0822 10:34:20.805116 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0822 10:34:20.816763 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0822 10:34:20.824894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0822 10:34:20.827720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0822 10:34:20.833550 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0822 10:34:20.833640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0822 10:34:20.837388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0822 10:34:20.840628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0822 10:34:20.842418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0822 10:34:20.844124 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0822 10:34:20.844294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0822 10:34:20.846196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0822 10:34:20.848154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0822 10:34:20.853137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0822 10:34:20.857521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0822 10:34:20.860306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0822 10:34:20.862039 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0822 10:34:20.865772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0822 10:34:20.868564 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0822 10:34:20.868589 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0822 10:34:20.868600 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0822 10:34:20.868628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0822 10:34:20.871463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0822 10:34:20.873985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0822 10:34:20.877518 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0822 10:34:20.879283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0822 10:34:20.884322 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.884611 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.885354 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.885571 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.896781 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.916794 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.931662 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.944081 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.956024 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:20.959321 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:34:34.742462 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-22 10:34:34.742432146 +0000 UTC m=+13.982434841 I0822 10:34:35.471505 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 10:34:35.471485804 +0000 UTC m=+14.711488499 I0822 10:34:35.471585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:34:35.471638 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-22 10:34:35.471626215 +0000 UTC m=+14.711628900 I0822 10:34:35.486217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:34:35.486318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:34:35.486341 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-22 10:34:35.486336065 +0000 UTC m=+14.726338730 E0822 10:34:35.487373 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:34:35.487437 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-22 10:34:35.487428838 +0000 UTC m=+14.727431503 E0822 10:34:35.487460 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:34:35.508754 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0822 10:34:35.509184 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:34:35.509273 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:34:35.509351 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0822 10:34:35.522698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:34:35.525930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tqmql" condition "Approved" to 2026-08-22 10:34:35.52591795 +0000 UTC m=+14.765920615 I0822 10:34:35.539472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tqmql" condition "Ready" to 2026-08-22 10:34:35.539460216 +0000 UTC m=+14.779462871 I0822 10:34:35.561368 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:34:35.561354145 +0000 UTC m=+14.801356810 I0822 10:34:35.576836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:34:35.616956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:34:40.509542 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:34:40.509528703 +0000 UTC m=+19.749531368 I0822 10:35:04.242795 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-22 10:35:04.24274654 +0000 UTC m=+43.482749205 I0822 10:35:04.245310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:35:04.245427 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-22 10:35:04.245414921 +0000 UTC m=+43.485417606 I0822 10:35:04.264760 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-22 10:35:04.264749535 +0000 UTC m=+43.504752200 I0822 10:35:04.274396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:35:04.274505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:35:04.274531 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-22 10:35:04.27452436 +0000 UTC m=+43.514527015 I0822 10:35:04.397802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-84r87" condition "Approved" to 2026-08-22 10:35:04.39779196 +0000 UTC m=+43.637794625 I0822 10:35:04.430935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-84r87" condition "Ready" to 2026-08-22 10:35:04.430920925 +0000 UTC m=+43.670923620 I0822 10:35:04.461388 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:35:04.461376958 +0000 UTC m=+43.701379643 I0822 10:35:04.484789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:35:04.485161 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:35:04.485154705 +0000 UTC m=+43.725157370 I0822 10:35:04.491848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:35:04.508981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:39.347979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Ready" to 2026-08-22 10:39:39.347948125 +0000 UTC m=+318.587950790 I0822 10:39:39.348076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-105.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:39:39.348127 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Issuing" to 2026-08-22 10:39:39.348116958 +0000 UTC m=+318.588119623 I0822 10:39:39.369960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:39.370168 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Ready" to 2026-08-22 10:39:39.370156252 +0000 UTC m=+318.610158917 I0822 10:39:39.494088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:39.529445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-105.nip.io-tls-9cw8v" condition "Approved" to 2026-08-22 10:39:39.529420155 +0000 UTC m=+318.769422820 I0822 10:39:39.558081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-105.nip.io-tls-9cw8v" condition "Ready" to 2026-08-22 10:39:39.558066787 +0000 UTC m=+318.798069442 I0822 10:39:39.587436 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:39:39.587420523 +0000 UTC m=+318.827423188 I0822 10:39:39.604988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:39.605541 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:39:39.605534608 +0000 UTC m=+318.845537273 I0822 10:39:39.621810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:39.629782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:40:45.687575 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-22 10:40:45.68753053 +0000 UTC m=+384.927533195 I0822 10:40:45.687625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:40:45.687678 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-22 10:40:45.687665002 +0000 UTC m=+384.927667687 E0822 10:40:45.699024 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:40:45.699076 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-22 10:40:45.699068637 +0000 UTC m=+384.939071302 E0822 10:40:45.699135 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:40:45.702600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:40:45.702738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:40:45.703045 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-22 10:40:45.702847788 +0000 UTC m=+384.942850473 E0822 10:40:45.715825 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0822 10:40:45.716115 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:40:45.716298 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:40:45.716445 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0822 10:40:45.744071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jvp2g" condition "Approved" to 2026-08-22 10:40:45.744047144 +0000 UTC m=+384.984049829 I0822 10:40:45.758313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jvp2g" condition "Ready" to 2026-08-22 10:40:45.758302096 +0000 UTC m=+384.998304761 I0822 10:40:45.781311 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:40:45.781300968 +0000 UTC m=+385.021303633 I0822 10:40:45.800215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:40:45.801329 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:40:45.801315012 +0000 UTC m=+385.041317707 I0822 10:40:45.818451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:40:50.716803 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:40:50.716778119 +0000 UTC m=+389.956780814 I0822 10:41:36.002454 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-22 10:41:36.002437431 +0000 UTC m=+435.242440096 I0822 10:41:36.002656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:41:36.002752 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-22 10:41:36.002742335 +0000 UTC m=+435.242745000 I0822 10:41:36.038510 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-22 10:41:36.038495524 +0000 UTC m=+435.278498189 I0822 10:41:36.039895 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-22 10:41:36.039877635 +0000 UTC m=+435.279880290 I0822 10:41:36.040053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:41:36.066837 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 10:41:36.066821888 +0000 UTC m=+435.306824563 I0822 10:41:36.040335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:41:36.072966 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 10:41:36.072954602 +0000 UTC m=+435.312957267 I0822 10:41:36.110871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:36.110933 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:41:36.110967 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-22 10:41:36.110959725 +0000 UTC m=+435.350962380 I0822 10:41:36.199892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:36.199969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:41:36.200001 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 10:41:36.199993631 +0000 UTC m=+435.439996306 I0822 10:41:36.203035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:36.205068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:41:36.205113 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 10:41:36.20510428 +0000 UTC m=+435.445106935 I0822 10:41:36.388815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-frgh7" condition "Approved" to 2026-08-22 10:41:36.388796267 +0000 UTC m=+435.628798932 I0822 10:41:36.417120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:36.425485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-frgh7" condition "Ready" to 2026-08-22 10:41:36.425466879 +0000 UTC m=+435.665469534 I0822 10:41:36.428123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lx4pt" condition "Approved" to 2026-08-22 10:41:36.428109379 +0000 UTC m=+435.668112044 I0822 10:41:36.456070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:36.461265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lx4pt" condition "Ready" to 2026-08-22 10:41:36.461254328 +0000 UTC m=+435.701256993 I0822 10:41:36.468139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d9m9s" condition "Approved" to 2026-08-22 10:41:36.468127143 +0000 UTC m=+435.708129788 I0822 10:41:36.478448 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:41:36.478436881 +0000 UTC m=+435.718439526 I0822 10:41:36.498436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d9m9s" condition "Ready" to 2026-08-22 10:41:36.498422308 +0000 UTC m=+435.738424973 I0822 10:41:36.588655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:36.589155 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:41:36.58914229 +0000 UTC m=+435.829144955 I0822 10:41:36.747398 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:41:36.747377106 +0000 UTC m=+435.987379761 I0822 10:41:36.989994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:37.087462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:37.088048 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:41:37.088036381 +0000 UTC m=+436.328039066 I0822 10:41:37.188852 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:41:37.188828955 +0000 UTC m=+436.428831650 I0822 10:41:37.544226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:37.544744 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:41:37.544734089 +0000 UTC m=+436.784736754 I0822 10:41:37.588793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:37.887677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:37.939566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:47.315930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:41:47.316000 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls" condition "Issuing" to 2026-08-22 10:41:47.315985243 +0000 UTC m=+446.555987928 I0822 10:41:47.316091 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls" condition "Ready" to 2026-08-22 10:41:47.315920342 +0000 UTC m=+446.555923027 I0822 10:41:47.333360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:47.333505 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls" condition "Ready" to 2026-08-22 10:41:47.333476949 +0000 UTC m=+446.573479614 I0822 10:41:47.464887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:41:47.497604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nqjlw-lgzp6" condition "Approved" to 2026-08-22 10:41:47.497585223 +0000 UTC m=+446.737587888 I0822 10:41:47.524583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nqjlw-lgzp6" condition "Ready" to 2026-08-22 10:41:47.524570522 +0000 UTC m=+446.764573197 I0822 10:41:47.560589 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:41:47.560548209 +0000 UTC m=+446.800550874 I0822 10:41:47.595304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nqjlw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:42:02.118365 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 10:42:02.118330341 +0000 UTC m=+461.358333016 I0822 10:42:02.118601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:42:02.118644 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-22 10:42:02.118634405 +0000 UTC m=+461.358637070 I0822 10:42:02.140952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:42:02.141074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:42:02.141116 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-22 10:42:02.141109923 +0000 UTC m=+461.381112578 I0822 10:42:02.452503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pvc54" condition "Approved" to 2026-08-22 10:42:02.45248689 +0000 UTC m=+461.692489565 I0822 10:42:02.472549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pvc54" condition "Ready" to 2026-08-22 10:42:02.472531881 +0000 UTC m=+461.712534556 I0822 10:42:02.501983 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:42:02.501968054 +0000 UTC m=+461.741970719 I0822 10:42:02.524698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:45:24.895893 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-22 10:45:24.895866223 +0000 UTC m=+664.135868918 I0822 10:45:24.896279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:45:24.896309 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 10:45:24.896302906 +0000 UTC m=+664.136305591 I0822 10:45:24.914990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:45:24.915054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:45:24.915071 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 10:45:24.915065232 +0000 UTC m=+664.155067897 I0822 10:45:25.183315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rt6b5" condition "Approved" to 2026-08-22 10:45:25.183290411 +0000 UTC m=+664.423293066 I0822 10:45:25.204526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rt6b5" condition "Ready" to 2026-08-22 10:45:25.204517339 +0000 UTC m=+664.444519984 I0822 10:45:25.238793 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:45:25.238776889 +0000 UTC m=+664.478779554 I0822 10:45:25.271372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:45:25.271759 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:45:25.27174403 +0000 UTC m=+664.511746685 I0822 10:45:25.274686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:45:25.287403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:45:25.287895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:45:25.288189 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:45:25.288182905 +0000 UTC m=+664.528185550 I0822 10:46:08.228361 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-22 10:46:08.228305264 +0000 UTC m=+707.468307949 I0822 10:46:08.228994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:46:08.229131 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 10:46:08.229119738 +0000 UTC m=+707.469122423 I0822 10:46:08.252097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:46:08.253605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:46:08.253655 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 10:46:08.25363117 +0000 UTC m=+707.493633835 I0822 10:46:08.568392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qqhcv" condition "Approved" to 2026-08-22 10:46:08.56836782 +0000 UTC m=+707.808370475 I0822 10:46:08.595933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qqhcv" condition "Ready" to 2026-08-22 10:46:08.595922138 +0000 UTC m=+707.835924793 I0822 10:46:08.634473 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:46:08.634460091 +0000 UTC m=+707.874462746 I0822 10:46:08.661087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:46:08.661584 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:46:08.661575478 +0000 UTC m=+707.901578143 I0822 10:46:08.694663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"