I0907 03:31:32.552853 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0907 03:31:32.553107 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0907 03:31:32.553278 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0907 03:31:32.559410 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0907 03:31:32.562743 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0907 03:31:32.563101 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0907 03:31:32.563123 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0907 03:31:32.569199 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0907 03:31:32.587284 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0907 03:31:32.587621 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0907 03:31:32.592196 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0907 03:31:32.592298 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0907 03:31:32.595616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0907 03:31:32.598645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0907 03:31:32.605271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0907 03:31:32.608124 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0907 03:31:32.608366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0907 03:31:32.611077 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0907 03:31:32.613706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0907 03:31:32.616129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0907 03:31:32.618559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0907 03:31:32.620991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0907 03:31:32.626284 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0907 03:31:32.628928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0907 03:31:32.631234 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0907 03:31:32.633774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0907 03:31:32.635960 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0907 03:31:32.635981 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0907 03:31:32.635990 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0907 03:31:32.636088 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0907 03:31:32.638570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0907 03:31:32.641214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0907 03:31:32.643937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0907 03:31:32.647452 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.650448 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.650944 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.651798 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.673746 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.701365 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.716539 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.735066 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.753696 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:32.759648 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:31:44.520637 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 03:31:44.520626349 +0000 UTC m=+12.006481804 I0907 03:31:45.286648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:31:45.286686 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 03:31:45.286671097 +0000 UTC m=+12.772526632 I0907 03:31:45.288157 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 03:31:45.288125146 +0000 UTC m=+12.773980651 I0907 03:31:45.308338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:31:45.308493 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 03:31:45.308477463 +0000 UTC m=+12.794332958 E0907 03:31:45.316360 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 03:31:45.316431 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 03:31:45.316424165 +0000 UTC m=+12.802279630 E0907 03:31:45.316458 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:31:45.329170 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0907 03:31:45.329323 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:31:45.329376 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:31:45.329427 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0907 03:31:45.336929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:31:45.368053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ks2qs" condition "Approved" to 2026-09-07 03:31:45.368037811 +0000 UTC m=+12.853893306 I0907 03:31:45.384737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ks2qs" condition "Ready" to 2026-09-07 03:31:45.384720159 +0000 UTC m=+12.870575664 I0907 03:31:45.416616 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:31:45.416593724 +0000 UTC m=+12.902449229 I0907 03:31:45.438673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:31:45.440445 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:31:45.440434215 +0000 UTC m=+12.926289690 I0907 03:31:45.441126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:31:45.463146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:31:45.463463 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:31:45.463453293 +0000 UTC m=+12.949308778 I0907 03:31:50.330387 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:31:50.330365812 +0000 UTC m=+17.816221317 I0907 03:32:15.107458 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:32:15.107517 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 03:32:15.107510443 +0000 UTC m=+42.593365928 I0907 03:32:15.107669 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 03:32:15.107649627 +0000 UTC m=+42.593505122 I0907 03:32:15.122016 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 03:32:15.122006725 +0000 UTC m=+42.607862200 I0907 03:32:15.143501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:32:15.144562 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 03:32:15.144552211 +0000 UTC m=+42.630407726 I0907 03:32:15.395812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:32:15.436974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xfhzj" condition "Approved" to 2026-09-07 03:32:15.436954547 +0000 UTC m=+42.922810042 I0907 03:32:15.477437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xfhzj" condition "Ready" to 2026-09-07 03:32:15.477423461 +0000 UTC m=+42.963278966 I0907 03:32:15.511363 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:32:15.511349312 +0000 UTC m=+42.997204817 I0907 03:32:15.547839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:32:15.548141 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:32:15.548135493 +0000 UTC m=+43.033990968 I0907 03:32:15.568568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:36:52.213933 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-208.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:36:52.213925 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-208.nip.io-tls" condition "Ready" to 2026-09-07 03:36:52.213911372 +0000 UTC m=+319.699766867 I0907 03:36:52.213994 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-208.nip.io-tls" condition "Issuing" to 2026-09-07 03:36:52.213982035 +0000 UTC m=+319.699837540 I0907 03:36:52.238737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-208.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-208.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:36:52.238842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-208.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:36:52.238870 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-208.nip.io-tls" condition "Issuing" to 2026-09-07 03:36:52.238862256 +0000 UTC m=+319.724717761 I0907 03:36:52.458430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-208.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-208.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:36:52.468310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-208.nip.io-tls-k9689" condition "Approved" to 2026-09-07 03:36:52.468294812 +0000 UTC m=+319.954150327 I0907 03:36:52.497440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-208.nip.io-tls-k9689" condition "Ready" to 2026-09-07 03:36:52.49742619 +0000 UTC m=+319.983281695 I0907 03:36:52.531485 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-208.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:36:52.531470489 +0000 UTC m=+320.017325964 I0907 03:36:52.553681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-208.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-208.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:36:52.554084 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-208.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:36:52.554076777 +0000 UTC m=+320.039932252 I0907 03:36:52.560471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-208.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-208.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:36:52.573915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-208.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-208.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:04.561546 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 03:38:04.561528416 +0000 UTC m=+392.047383921 I0907 03:38:04.561723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:04.561872 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 03:38:04.561862587 +0000 UTC m=+392.047718052 E0907 03:38:04.575605 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 03:38:04.575661 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 03:38:04.57565232 +0000 UTC m=+392.061507785 E0907 03:38:04.575711 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 03:38:04.578512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:04.578628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:04.578730 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 03:38:04.578719826 +0000 UTC m=+392.064575351 E0907 03:38:04.592871 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0907 03:38:04.593123 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:38:04.593182 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:38:04.593283 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0907 03:38:04.636389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:04.636774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jpjnm" condition "Approved" to 2026-09-07 03:38:04.636757869 +0000 UTC m=+392.122613344 I0907 03:38:04.649958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jpjnm" condition "Ready" to 2026-09-07 03:38:04.649946073 +0000 UTC m=+392.135801548 I0907 03:38:04.681861 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:04.681847056 +0000 UTC m=+392.167702541 I0907 03:38:04.694933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:04.695560 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:04.695554356 +0000 UTC m=+392.181409831 I0907 03:38:04.713942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:09.593758 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:09.593747807 +0000 UTC m=+397.079603272 I0907 03:38:50.526598 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 03:38:50.526579071 +0000 UTC m=+438.012434566 I0907 03:38:50.540825 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:50.540931 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 03:38:50.540921205 +0000 UTC m=+438.026776670 I0907 03:38:50.541293 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 03:38:50.541282126 +0000 UTC m=+438.027137591 I0907 03:38:50.541411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:50.541453 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 03:38:50.541448091 +0000 UTC m=+438.027303546 I0907 03:38:50.546410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:50.546440 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 03:38:50.546435405 +0000 UTC m=+438.032290870 I0907 03:38:50.546483 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 03:38:50.546475156 +0000 UTC m=+438.032330631 I0907 03:38:50.581214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:50.581288 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 03:38:50.581283043 +0000 UTC m=+438.067138508 I0907 03:38:50.593272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:50.593366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:50.593417 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 03:38:50.593410848 +0000 UTC m=+438.079266313 I0907 03:38:50.600168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:50.600240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:50.605622 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 03:38:50.600261471 +0000 UTC m=+438.086116936 I0907 03:38:50.661242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:50.700022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zrsr5" condition "Approved" to 2026-09-07 03:38:50.700007447 +0000 UTC m=+438.185862922 I0907 03:38:50.716616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zrsr5" condition "Ready" to 2026-09-07 03:38:50.716605711 +0000 UTC m=+438.202461176 I0907 03:38:50.736884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:50.743479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8fqkt" condition "Approved" to 2026-09-07 03:38:50.743470103 +0000 UTC m=+438.229325558 I0907 03:38:50.748204 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:50.74819116 +0000 UTC m=+438.234046625 I0907 03:38:50.768552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8fqkt" condition "Ready" to 2026-09-07 03:38:50.768541239 +0000 UTC m=+438.254396704 I0907 03:38:50.773587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:50.802509 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:50.80249479 +0000 UTC m=+438.288350255 I0907 03:38:50.924989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:50.925347 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:50.925337332 +0000 UTC m=+438.411192807 I0907 03:38:51.214066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:51.263253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:51.471546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6kfpk" condition "Approved" to 2026-09-07 03:38:51.471514103 +0000 UTC m=+438.957369578 I0907 03:38:51.737224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6kfpk" condition "Ready" to 2026-09-07 03:38:51.737205154 +0000 UTC m=+439.223060659 I0907 03:38:52.017806 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:52.017792936 +0000 UTC m=+439.503648401 I0907 03:38:52.115121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:59.038376 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" condition "Ready" to 2026-09-07 03:38:59.038357756 +0000 UTC m=+446.524213261 I0907 03:38:59.038398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:59.038593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" condition "Issuing" to 2026-09-07 03:38:59.038582173 +0000 UTC m=+446.524437648 I0907 03:38:59.056064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bmt88-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:59.056139 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" condition "Ready" to 2026-09-07 03:38:59.056131275 +0000 UTC m=+446.541986750 I0907 03:38:59.202260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bmt88-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:59.243030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bmt88-brh7n" condition "Approved" to 2026-09-07 03:38:59.243016885 +0000 UTC m=+446.728872390 I0907 03:38:59.275563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bmt88-brh7n" condition "Ready" to 2026-09-07 03:38:59.27555052 +0000 UTC m=+446.761405995 I0907 03:38:59.421191 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:59.421179437 +0000 UTC m=+446.907034912 I0907 03:38:59.444121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bmt88-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:59.506125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bmt88-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bmt88-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:39:12.648761 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 03:39:12.648743684 +0000 UTC m=+460.134599169 I0907 03:39:12.649188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:39:12.649211 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 03:39:12.649206699 +0000 UTC m=+460.135062174 I0907 03:39:12.660030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:39:12.660115 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 03:39:12.660109214 +0000 UTC m=+460.145964699 I0907 03:39:12.841251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:39:12.883512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wftjg" condition "Approved" to 2026-09-07 03:39:12.8835031 +0000 UTC m=+460.369358565 I0907 03:39:12.908233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wftjg" condition "Ready" to 2026-09-07 03:39:12.908222091 +0000 UTC m=+460.394077576 I0907 03:39:12.953828 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:39:12.953819265 +0000 UTC m=+460.439674740 I0907 03:39:12.973930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:42:32.485582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:42:32.485625 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 03:42:32.485615434 +0000 UTC m=+659.971470939 I0907 03:42:32.486084 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 03:42:32.48546693 +0000 UTC m=+659.971322435 I0907 03:42:32.516156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:42:32.516263 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 03:42:32.516250815 +0000 UTC m=+660.002106330 I0907 03:42:33.025550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:42:33.103787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vkxsc" condition "Approved" to 2026-09-07 03:42:33.10377745 +0000 UTC m=+660.589632915 I0907 03:42:33.122605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vkxsc" condition "Ready" to 2026-09-07 03:42:33.122597306 +0000 UTC m=+660.608452771 I0907 03:42:33.146553 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:42:33.146542455 +0000 UTC m=+660.632397910 I0907 03:42:33.161032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:43:15.532913 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-07 03:43:15.532900278 +0000 UTC m=+703.018755773 I0907 03:43:15.532937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:43:15.533018 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 03:43:15.533007831 +0000 UTC m=+703.018863326 I0907 03:43:15.552935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:43:15.553090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:43:15.553157 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 03:43:15.553149825 +0000 UTC m=+703.039005300 I0907 03:43:15.795869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:43:15.815215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bcvm6" condition "Approved" to 2026-09-07 03:43:15.815196739 +0000 UTC m=+703.301052294 I0907 03:43:15.845177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bcvm6" condition "Ready" to 2026-09-07 03:43:15.845163289 +0000 UTC m=+703.331018794 I0907 03:43:15.872856 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:43:15.87284471 +0000 UTC m=+703.358700165 I0907 03:43:15.892508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:43:15.892826 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:43:15.892819979 +0000 UTC m=+703.378675454 I0907 03:43:15.909349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:43:15.923488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"