I0815 02:35:43.667360 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0815 02:35:43.667552 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0815 02:35:43.667843 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0815 02:35:43.675148 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0815 02:35:43.675806 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0815 02:35:43.675907 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0815 02:35:43.675938 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0815 02:35:43.678827 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0815 02:35:43.694016 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0815 02:35:43.699044 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0815 02:35:43.703235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0815 02:35:43.708633 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0815 02:35:43.711621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0815 02:35:43.714388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0815 02:35:43.716841 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0815 02:35:43.720932 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0815 02:35:43.725240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0815 02:35:43.728945 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0815 02:35:43.736399 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0815 02:35:43.736508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0815 02:35:43.740809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0815 02:35:43.742671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0815 02:35:43.744485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0815 02:35:43.746330 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0815 02:35:43.746354 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0815 02:35:43.746362 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0815 02:35:43.746369 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0815 02:35:43.746407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0815 02:35:43.748526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0815 02:35:43.752692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0815 02:35:43.756630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0815 02:35:43.762117 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0815 02:35:43.762182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0815 02:35:43.765264 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.765596 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.766032 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.766821 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.784038 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.798502 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.812637 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.832334 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.845596 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:43.852591 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 02:35:54.798648 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-15 02:35:54.798624325 +0000 UTC m=+11.164300692 I0815 02:35:55.577501 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-15 02:35:55.577480787 +0000 UTC m=+11.943157124 I0815 02:35:55.577731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:35:55.577814 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-15 02:35:55.577804874 +0000 UTC m=+11.943481221 I0815 02:35:55.593181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:35:55.593391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:35:55.593462 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-15 02:35:55.593451013 +0000 UTC m=+11.959127400 E0815 02:35:55.600357 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0815 02:35:55.600681 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-15 02:35:55.600663998 +0000 UTC m=+11.966340365 E0815 02:35:55.600737 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 02:35:55.611611 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0815 02:35:55.611726 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 02:35:55.611759 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 02:35:55.611819 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0815 02:35:55.641508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z6tb7" condition "Approved" to 2026-08-15 02:35:55.641498102 +0000 UTC m=+12.007174449 I0815 02:35:55.654567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z6tb7" condition "Ready" to 2026-08-15 02:35:55.654553892 +0000 UTC m=+12.020230239 I0815 02:35:55.681009 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:35:55.680989077 +0000 UTC m=+12.046665424 I0815 02:35:55.699215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:35:55.699706 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:35:55.699697833 +0000 UTC m=+12.065374190 I0815 02:35:55.708205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:35:55.720075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:36:00.613139 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:36:00.613117834 +0000 UTC m=+16.978794211 I0815 02:36:22.905827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:36:22.905881 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-15 02:36:22.905872653 +0000 UTC m=+39.271548990 I0815 02:36:22.906001 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-15 02:36:22.90598221 +0000 UTC m=+39.271658547 I0815 02:36:22.913239 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-15 02:36:22.913230701 +0000 UTC m=+39.278907048 I0815 02:36:22.938704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:36:22.938760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:36:22.938775 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-15 02:36:22.938768728 +0000 UTC m=+39.304445075 I0815 02:36:23.079316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xwshk" condition "Approved" to 2026-08-15 02:36:23.079298353 +0000 UTC m=+39.444974720 I0815 02:36:23.112840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xwshk" condition "Ready" to 2026-08-15 02:36:23.11247201 +0000 UTC m=+39.478148357 I0815 02:36:23.153910 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:36:23.153898947 +0000 UTC m=+39.519575294 I0815 02:36:23.173725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:40:49.440202 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready" to 2026-08-15 02:40:49.440180076 +0000 UTC m=+305.805856453 I0815 02:40:49.440395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-170.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:40:49.440655 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Issuing" to 2026-08-15 02:40:49.440643418 +0000 UTC m=+305.806319765 I0815 02:40:49.461415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:40:49.461495 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready" to 2026-08-15 02:40:49.461487571 +0000 UTC m=+305.827163918 I0815 02:40:49.641193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:40:49.673119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-170.nip.io-tls-vk5hv" condition "Approved" to 2026-08-15 02:40:49.673099406 +0000 UTC m=+306.038775783 I0815 02:40:49.709202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-170.nip.io-tls-vk5hv" condition "Ready" to 2026-08-15 02:40:49.709185059 +0000 UTC m=+306.074861426 I0815 02:40:49.732988 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:40:49.732981778 +0000 UTC m=+306.098658125 I0815 02:40:49.751255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:40:49.752186 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:40:49.752176199 +0000 UTC m=+306.117852546 I0815 02:40:49.774694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:41:52.239837 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-15 02:41:52.239819104 +0000 UTC m=+368.605495451 I0815 02:41:52.239832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:41:52.240007 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-15 02:41:52.239987532 +0000 UTC m=+368.605663909 I0815 02:41:52.255175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:41:52.255346 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-15 02:41:52.255317888 +0000 UTC m=+368.620994215 E0815 02:41:52.259632 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0815 02:41:52.259699 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-15 02:41:52.259688804 +0000 UTC m=+368.625365181 E0815 02:41:52.259839 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0815 02:41:52.269069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0815 02:41:52.269684 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0815 02:41:52.269901 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 02:41:52.270017 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 02:41:52.270173 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0815 02:41:52.287549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-b99vw" condition "Approved" to 2026-08-15 02:41:52.287535361 +0000 UTC m=+368.653211708 I0815 02:41:52.301111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-b99vw" condition "Ready" to 2026-08-15 02:41:52.301097189 +0000 UTC m=+368.666773536 I0815 02:41:52.323545 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:41:52.323529854 +0000 UTC m=+368.689206201 I0815 02:41:52.338507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:41:52.383843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:41:57.270423 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:41:57.270364825 +0000 UTC m=+373.636041192 I0815 02:42:37.415551 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-15 02:42:37.415537719 +0000 UTC m=+413.781214056 I0815 02:42:37.415882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:42:37.422756 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-15 02:42:37.417069151 +0000 UTC m=+413.782745508 I0815 02:42:37.415914 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-15 02:42:37.415910879 +0000 UTC m=+413.781587216 I0815 02:42:37.426476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:42:37.426503 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-15 02:42:37.426494308 +0000 UTC m=+413.792170635 I0815 02:42:37.449672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-15 02:42:37.449662412 +0000 UTC m=+413.815338749 I0815 02:42:37.449916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:42:37.449930 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-15 02:42:37.449927106 +0000 UTC m=+413.815603443 I0815 02:42:37.478424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:37.478530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:37.478581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:42:37.478600 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-15 02:42:37.478595357 +0000 UTC m=+413.844271694 I0815 02:42:37.479997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:42:37.480057 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-15 02:42:37.480049825 +0000 UTC m=+413.845726172 I0815 02:42:37.486751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:37.487077 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-15 02:42:37.487064462 +0000 UTC m=+413.852740809 I0815 02:42:37.673782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:37.686974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-77kl9" condition "Approved" to 2026-08-15 02:42:37.686954642 +0000 UTC m=+414.052630989 I0815 02:42:37.692717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:37.702945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2pp6n" condition "Approved" to 2026-08-15 02:42:37.702937601 +0000 UTC m=+414.068613938 I0815 02:42:37.716445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-77kl9" condition "Ready" to 2026-08-15 02:42:37.716431426 +0000 UTC m=+414.082107773 I0815 02:42:37.727439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2pp6n" condition "Ready" to 2026-08-15 02:42:37.727431277 +0000 UTC m=+414.093107614 I0815 02:42:37.755073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:37.770361 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:42:37.770344303 +0000 UTC m=+414.136020630 I0815 02:42:37.770969 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:42:37.770965456 +0000 UTC m=+414.136641783 I0815 02:42:37.803954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:37.804332 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:42:37.804325229 +0000 UTC m=+414.170001566 I0815 02:42:37.810099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:37.955880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:38.474473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2qgk5" condition "Approved" to 2026-08-15 02:42:38.474452682 +0000 UTC m=+414.840129019 I0815 02:42:38.915163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2qgk5" condition "Ready" to 2026-08-15 02:42:38.915153453 +0000 UTC m=+415.280829800 E0815 02:42:38.948898 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-g6qpc\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0815 02:42:39.151907 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-2qgk5" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-rjwzb" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0815 02:42:39.334129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rkt9t" condition "Approved" to 2026-08-15 02:42:39.334105046 +0000 UTC m=+415.699781423 I0815 02:42:39.615544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rkt9t" condition "Ready" to 2026-08-15 02:42:39.61553602 +0000 UTC m=+415.981212347 I0815 02:42:39.856712 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:42:39.856688537 +0000 UTC m=+416.222364884 I0815 02:42:39.957256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:39.957787 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:42:39.95776091 +0000 UTC m=+416.323437247 I0815 02:42:40.204298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:40.257094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:45.980397 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-86glw-tls" condition "Ready" to 2026-08-15 02:42:45.980359126 +0000 UTC m=+422.346035473 I0815 02:42:45.980765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-86glw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:42:45.980798 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-86glw-tls" condition "Issuing" to 2026-08-15 02:42:45.980792321 +0000 UTC m=+422.346468668 I0815 02:42:45.997721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-86glw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-86glw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:45.997905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-86glw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:42:45.997936 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-86glw-tls" condition "Issuing" to 2026-08-15 02:42:45.997928794 +0000 UTC m=+422.363605131 I0815 02:42:46.135407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-86glw-px6kv" condition "Approved" to 2026-08-15 02:42:46.135390686 +0000 UTC m=+422.501067023 I0815 02:42:46.159381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-86glw-px6kv" condition "Ready" to 2026-08-15 02:42:46.159364879 +0000 UTC m=+422.525041226 I0815 02:42:46.191799 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-86glw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:42:46.191781107 +0000 UTC m=+422.557457454 I0815 02:42:46.213421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-86glw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-86glw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:46.259464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-86glw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-86glw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:58.261518 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-15 02:42:58.261490401 +0000 UTC m=+434.627166738 I0815 02:42:58.261754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:42:58.261807 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-15 02:42:58.261795038 +0000 UTC m=+434.627471405 I0815 02:42:58.285371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:58.285419 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-15 02:42:58.285415583 +0000 UTC m=+434.651091920 I0815 02:42:58.466849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:42:58.497749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xj9gv" condition "Approved" to 2026-08-15 02:42:58.497735741 +0000 UTC m=+434.863412078 I0815 02:42:58.519287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xj9gv" condition "Ready" to 2026-08-15 02:42:58.519267318 +0000 UTC m=+434.884943665 I0815 02:42:58.559505 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:42:58.559482727 +0000 UTC m=+434.925159064 I0815 02:42:58.597988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:46:13.713932 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-15 02:46:13.71391164 +0000 UTC m=+630.079587977 I0815 02:46:13.714466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:46:13.714504 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-15 02:46:13.714493302 +0000 UTC m=+630.080169669 I0815 02:46:13.734919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:46:13.734994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:46:13.735010 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-15 02:46:13.735005558 +0000 UTC m=+630.100681905 I0815 02:46:13.975696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:46:13.983367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5278q" condition "Approved" to 2026-08-15 02:46:13.983356042 +0000 UTC m=+630.349032389 I0815 02:46:14.000820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5278q" condition "Ready" to 2026-08-15 02:46:14.00080269 +0000 UTC m=+630.366479057 I0815 02:46:14.029328 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:46:14.029314274 +0000 UTC m=+630.394990601 I0815 02:46:14.050978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:46:14.051369 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:46:14.051362629 +0000 UTC m=+630.417038966 I0815 02:46:14.062604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:46:14.062882 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:46:14.062873567 +0000 UTC m=+630.428549914 I0815 02:46:57.082204 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-15 02:46:57.082191933 +0000 UTC m=+673.447868280 I0815 02:46:57.082793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:46:57.085180 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-15 02:46:57.085169548 +0000 UTC m=+673.450845915 I0815 02:46:57.100014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:46:57.100131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 02:46:57.100191 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-15 02:46:57.100185851 +0000 UTC m=+673.465862188 I0815 02:46:57.328192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:46:57.340375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-n5v59" condition "Approved" to 2026-08-15 02:46:57.340362637 +0000 UTC m=+673.706038974 I0815 02:46:57.363054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-n5v59" condition "Ready" to 2026-08-15 02:46:57.363040561 +0000 UTC m=+673.728716908 I0815 02:46:57.402179 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 02:46:57.402158122 +0000 UTC m=+673.767834469 I0815 02:46:57.425944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 02:46:57.485907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"