I0902 07:54:58.614999 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0902 07:54:58.615189 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0902 07:54:58.615369 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0902 07:54:58.624234 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0902 07:54:58.624633 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0902 07:54:58.625235 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0902 07:54:58.625366 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0902 07:54:58.627242 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0902 07:54:58.648423 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0902 07:54:58.648664 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0902 07:54:58.651745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0902 07:54:58.654345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0902 07:54:58.659567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0902 07:54:58.665605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0902 07:54:58.667971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0902 07:54:58.669750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0902 07:54:58.671787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0902 07:54:58.674264 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0902 07:54:58.676271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0902 07:54:58.678213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0902 07:54:58.683253 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0902 07:54:58.683280 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0902 07:54:58.683287 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0902 07:54:58.683293 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0902 07:54:58.683382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0902 07:54:58.685438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0902 07:54:58.687207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0902 07:54:58.688815 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0902 07:54:58.688900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0902 07:54:58.690622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0902 07:54:58.692285 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0902 07:54:58.694057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0902 07:54:58.696747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0902 07:54:58.699344 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.699655 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.700214 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.719425 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.739199 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.759090 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.802069 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.809025 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.825037 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:54:58.847153 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0902 07:55:17.035185 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-02 07:55:17.035170259 +0000 UTC m=+18.453667867 I0902 07:55:17.718090 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-02 07:55:17.718079058 +0000 UTC m=+19.136576636 I0902 07:55:17.718373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 07:55:17.718490 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-02 07:55:17.718478305 +0000 UTC m=+19.136975933 E0902 07:55:17.735167 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 07:55:17.735284 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-02 07:55:17.735271272 +0000 UTC m=+19.153768890 E0902 07:55:17.735934 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 07:55:17.737264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 07:55:17.737404 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-02 07:55:17.737393866 +0000 UTC m=+19.155891474 E0902 07:55:17.749236 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0902 07:55:17.749511 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 07:55:17.749621 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 07:55:17.749801 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0902 07:55:17.766663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 07:55:17.795563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tscd5" condition "Approved" to 2026-09-02 07:55:17.795549371 +0000 UTC m=+19.214046989 I0902 07:55:17.814269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tscd5" condition "Ready" to 2026-09-02 07:55:17.814256079 +0000 UTC m=+19.232753687 I0902 07:55:17.835792 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 07:55:17.835777002 +0000 UTC m=+19.254274610 I0902 07:55:17.857093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 07:55:22.750507 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 07:55:22.750494401 +0000 UTC m=+24.168992009 I0902 07:55:46.038570 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-02 07:55:46.038525317 +0000 UTC m=+47.457022925 I0902 07:55:46.039253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 07:55:46.039338 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-02 07:55:46.039331009 +0000 UTC m=+47.457828617 I0902 07:55:46.068536 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-02 07:55:46.068525477 +0000 UTC m=+47.487023065 I0902 07:55:46.076138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 07:55:46.076365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 07:55:46.076459 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-02 07:55:46.076452463 +0000 UTC m=+47.494950051 I0902 07:55:46.272725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 07:55:46.286025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6ttk" condition "Approved" to 2026-09-02 07:55:46.286010788 +0000 UTC m=+47.704508396 I0902 07:55:46.380098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6ttk" condition "Ready" to 2026-09-02 07:55:46.380090599 +0000 UTC m=+47.798588177 I0902 07:55:46.407734 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 07:55:46.407714104 +0000 UTC m=+47.826211682 I0902 07:55:46.426014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 07:55:46.426235 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 07:55:46.426228886 +0000 UTC m=+47.844726464 I0902 07:55:46.450274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 07:55:46.450575 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 07:55:46.450565593 +0000 UTC m=+47.869063171 I0902 08:01:00.610527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-85.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:01:00.610528 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Ready" to 2026-09-02 08:01:00.610504633 +0000 UTC m=+362.029002241 I0902 08:01:00.610564 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Issuing" to 2026-09-02 08:01:00.610557304 +0000 UTC m=+362.029054922 I0902 08:01:00.634872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:01:00.634952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-85.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:01:00.634970 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Issuing" to 2026-09-02 08:01:00.634962906 +0000 UTC m=+362.053460524 I0902 08:01:00.961451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:01:00.964720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-85.nip.io-tls-8ld52" condition "Approved" to 2026-09-02 08:01:00.96470977 +0000 UTC m=+362.383207378 I0902 08:01:00.990079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-85.nip.io-tls-8ld52" condition "Ready" to 2026-09-02 08:01:00.990063692 +0000 UTC m=+362.408561300 I0902 08:01:01.016937 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:01:01.016928645 +0000 UTC m=+362.435426223 I0902 08:01:01.037032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:01:01.037571 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:01:01.037561005 +0000 UTC m=+362.456058623 I0902 08:01:01.048780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:01:01.057816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:03.233142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:02:03.233174 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-02 08:02:03.233167029 +0000 UTC m=+424.651664607 I0902 08:02:03.233324 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-02 08:02:03.233318822 +0000 UTC m=+424.651816400 I0902 08:02:03.247027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:03.247090 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-02 08:02:03.247082112 +0000 UTC m=+424.665579700 E0902 08:02:03.247901 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 08:02:03.247967 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-02 08:02:03.247954659 +0000 UTC m=+424.666452277 E0902 08:02:03.248052 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 08:02:03.260922 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0902 08:02:03.261148 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 08:02:03.261193 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 08:02:03.261232 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0902 08:02:03.266073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:03.285492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7qm88" condition "Approved" to 2026-09-02 08:02:03.285477713 +0000 UTC m=+424.703975321 I0902 08:02:03.301331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7qm88" condition "Ready" to 2026-09-02 08:02:03.301317813 +0000 UTC m=+424.719815421 I0902 08:02:03.328442 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:02:03.328428514 +0000 UTC m=+424.746926112 I0902 08:02:03.352490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:03.398039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:08.261869 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:02:08.261856287 +0000 UTC m=+429.680353895 I0902 08:02:49.218469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:02:49.218516 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-02 08:02:49.218510563 +0000 UTC m=+470.637008141 I0902 08:02:49.219235 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-02 08:02:49.219231426 +0000 UTC m=+470.637729004 I0902 08:02:49.233484 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-02 08:02:49.233471233 +0000 UTC m=+470.651968811 I0902 08:02:49.235066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:02:49.235595 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-02 08:02:49.235590693 +0000 UTC m=+470.654088291 I0902 08:02:49.245180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:02:49.245212 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-02 08:02:49.245206223 +0000 UTC m=+470.663703791 I0902 08:02:49.245499 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-02 08:02:49.245495558 +0000 UTC m=+470.663993136 I0902 08:02:49.258103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:49.258193 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-02 08:02:49.258164405 +0000 UTC m=+470.676661983 I0902 08:02:49.263768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:49.263815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:02:49.263856 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-02 08:02:49.263851782 +0000 UTC m=+470.682349360 I0902 08:02:49.283841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:49.283914 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-02 08:02:49.283908608 +0000 UTC m=+470.702406186 I0902 08:02:49.473448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:49.474314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:49.613566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:49.613944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ffqrg" condition "Approved" to 2026-09-02 08:02:49.613936829 +0000 UTC m=+471.032434407 I0902 08:02:49.633390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ffqrg" condition "Ready" to 2026-09-02 08:02:49.633381273 +0000 UTC m=+471.051878851 I0902 08:02:49.683409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lm7sr" condition "Approved" to 2026-09-02 08:02:49.68340137 +0000 UTC m=+471.101898948 I0902 08:02:49.703252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lm7sr" condition "Ready" to 2026-09-02 08:02:49.703244712 +0000 UTC m=+471.121742290 I0902 08:02:49.711929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:49.728560 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:02:49.728551916 +0000 UTC m=+471.147049494 I0902 08:02:49.860533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-t8qfz" condition "Approved" to 2026-09-02 08:02:49.860520678 +0000 UTC m=+471.279018256 I0902 08:02:49.909171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:49.909505 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:02:49.909498576 +0000 UTC m=+471.327996164 I0902 08:02:49.955479 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-lm7sr" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-4b24c" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0902 08:02:50.126232 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-mnhzv\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0902 08:02:50.472715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-t8qfz" condition "Ready" to 2026-09-02 08:02:50.472704159 +0000 UTC m=+471.891201737 I0902 08:02:50.659400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:50.868949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-spfjq" condition "Approved" to 2026-09-02 08:02:50.868930695 +0000 UTC m=+472.287428313 I0902 08:02:50.968028 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:02:50.96800866 +0000 UTC m=+472.386506268 I0902 08:02:51.277960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-spfjq" condition "Ready" to 2026-09-02 08:02:51.277943826 +0000 UTC m=+472.696441434 I0902 08:02:51.435144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:51.435653 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:02:51.435643556 +0000 UTC m=+472.854141164 I0902 08:02:51.761980 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:02:51.761961199 +0000 UTC m=+473.180458807 I0902 08:02:51.820086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:51.916200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:02:51.916651 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:02:51.916643371 +0000 UTC m=+473.335140979 I0902 08:02:52.161451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:00.910886 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" condition "Ready" to 2026-09-02 08:03:00.910867702 +0000 UTC m=+482.329365320 I0902 08:03:00.911251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:03:00.911299 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" condition "Issuing" to 2026-09-02 08:03:00.91128833 +0000 UTC m=+482.329785938 I0902 08:03:00.926411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:00.926501 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" condition "Ready" to 2026-09-02 08:03:00.926491542 +0000 UTC m=+482.344989150 I0902 08:03:01.056116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:01.089536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fvwmz-sd7rp" condition "Approved" to 2026-09-02 08:03:01.089523469 +0000 UTC m=+482.508021057 I0902 08:03:01.112413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fvwmz-sd7rp" condition "Ready" to 2026-09-02 08:03:01.112401583 +0000 UTC m=+482.530899161 I0902 08:03:01.301749 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:03:01.301740247 +0000 UTC m=+482.720237825 I0902 08:03:01.378357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:01.462397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fvwmz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:29.748677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-02 08:03:29.748665792 +0000 UTC m=+511.167163390 I0902 08:03:29.749069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:03:29.749087 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-02 08:03:29.749083639 +0000 UTC m=+511.167581227 I0902 08:03:29.761804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:29.761871 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-02 08:03:29.761862202 +0000 UTC m=+511.180359810 I0902 08:03:29.989125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:30.030019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-r55xk" condition "Approved" to 2026-09-02 08:03:30.030002804 +0000 UTC m=+511.448500422 I0902 08:03:30.072801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-r55xk" condition "Ready" to 2026-09-02 08:03:30.072791202 +0000 UTC m=+511.491288790 I0902 08:03:30.116736 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:03:30.116725222 +0000 UTC m=+511.535222790 I0902 08:03:30.153960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:30.154387 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:03:30.154336776 +0000 UTC m=+511.572834354 I0902 08:03:30.167157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:03:30.175838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:06:29.129519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:06:29.129620 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-02 08:06:29.129595662 +0000 UTC m=+690.548093280 I0902 08:06:29.129517 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-02 08:06:29.129484738 +0000 UTC m=+690.547982346 I0902 08:06:29.150049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:06:29.151112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:06:29.151241 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-02 08:06:29.1511554 +0000 UTC m=+690.569652978 I0902 08:06:29.482879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lsss4" condition "Approved" to 2026-09-02 08:06:29.48286323 +0000 UTC m=+690.901360838 I0902 08:06:29.499192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lsss4" condition "Ready" to 2026-09-02 08:06:29.499180446 +0000 UTC m=+690.917678044 I0902 08:06:29.540510 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:06:29.540496063 +0000 UTC m=+690.958993651 I0902 08:06:29.566246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:07:09.225907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:07:09.226077 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-02 08:07:09.226062154 +0000 UTC m=+730.644559722 I0902 08:07:09.225985 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-02 08:07:09.225976931 +0000 UTC m=+730.644474549 I0902 08:07:09.243975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 08:07:09.244178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 08:07:09.244211 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-02 08:07:09.244202982 +0000 UTC m=+730.662700590 I0902 08:07:09.374625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pn9gd" condition "Approved" to 2026-09-02 08:07:09.37460391 +0000 UTC m=+730.793101488 I0902 08:07:09.402728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pn9gd" condition "Ready" to 2026-09-02 08:07:09.402717954 +0000 UTC m=+730.821215532 I0902 08:07:09.432448 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 08:07:09.432433075 +0000 UTC m=+730.850930653 I0902 08:07:09.447254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"