I0828 04:05:13.029050 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0828 04:05:13.029182 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0828 04:05:13.029264 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0828 04:05:13.038226 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0828 04:05:13.039020 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0828 04:05:13.039139 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0828 04:05:13.039208 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0828 04:05:13.043144 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0828 04:05:13.058697 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0828 04:05:13.063635 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0828 04:05:13.067854 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0828 04:05:13.067966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0828 04:05:13.078827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0828 04:05:13.082494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0828 04:05:13.086181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0828 04:05:13.090168 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0828 04:05:13.090201 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0828 04:05:13.090362 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0828 04:05:13.094005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0828 04:05:13.097723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0828 04:05:13.101475 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0828 04:05:13.108461 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0828 04:05:13.112424 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0828 04:05:13.115964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0828 04:05:13.119589 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0828 04:05:13.122257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0828 04:05:13.124712 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0828 04:05:13.127307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0828 04:05:13.129900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0828 04:05:13.132105 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0828 04:05:13.132135 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0828 04:05:13.132145 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0828 04:05:13.133129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0828 04:05:13.135082 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.137284 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.138888 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.158682 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.178195 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.194006 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.237154 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.244917 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.258241 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:13.276541 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0828 04:05:25.938368 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-28 04:05:25.938353358 +0000 UTC m=+12.948143745 I0828 04:05:26.689287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:05:26.689332 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-28 04:05:26.689325386 +0000 UTC m=+13.699115743 I0828 04:05:26.689569 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-28 04:05:26.689366078 +0000 UTC m=+13.699156465 I0828 04:05:26.706980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:05:26.707095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:05:26.707131 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-28 04:05:26.707124255 +0000 UTC m=+13.716914622 E0828 04:05:26.707919 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0828 04:05:26.708008 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-28 04:05:26.708002162 +0000 UTC m=+13.717792529 E0828 04:05:26.708337 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0828 04:05:26.723939 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0828 04:05:26.724102 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0828 04:05:26.724156 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0828 04:05:26.724214 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0828 04:05:26.751867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:05:26.756263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gpfpr" condition "Approved" to 2026-08-28 04:05:26.75625375 +0000 UTC m=+13.766044117 I0828 04:05:26.768940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gpfpr" condition "Ready" to 2026-08-28 04:05:26.76892746 +0000 UTC m=+13.778717847 I0828 04:05:26.787830 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:05:26.787820149 +0000 UTC m=+13.797610536 I0828 04:05:26.803333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:05:26.803738 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:05:26.803727628 +0000 UTC m=+13.813518015 I0828 04:05:26.811333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:05:26.821953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:05:31.724467 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:05:31.724454236 +0000 UTC m=+18.734244623 I0828 04:05:54.335621 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:05:54.335722 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-28 04:05:54.335711348 +0000 UTC m=+41.345501745 I0828 04:05:54.336218 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-28 04:05:54.336195102 +0000 UTC m=+41.345985489 I0828 04:05:54.355702 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-28 04:05:54.355688244 +0000 UTC m=+41.365478631 I0828 04:05:54.377818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:05:54.377943 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-28 04:05:54.377930786 +0000 UTC m=+41.387721173 I0828 04:05:54.571258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:05:54.609819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6mg7l" condition "Approved" to 2026-08-28 04:05:54.609805924 +0000 UTC m=+41.619596311 I0828 04:05:54.640177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6mg7l" condition "Ready" to 2026-08-28 04:05:54.640164571 +0000 UTC m=+41.649954968 I0828 04:05:54.680428 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:05:54.680411592 +0000 UTC m=+41.690201989 I0828 04:05:54.707922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:11:03.734910 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Ready" to 2026-08-28 04:11:03.734863837 +0000 UTC m=+350.744654224 I0828 04:11:03.735269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-124.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:11:03.735312 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Issuing" to 2026-08-28 04:11:03.735292195 +0000 UTC m=+350.745082592 I0828 04:11:03.757292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:11:03.757475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-124.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:11:03.757532 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Issuing" to 2026-08-28 04:11:03.75752236 +0000 UTC m=+350.767312747 I0828 04:11:04.155743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-124.nip.io-tls-jnzqn" condition "Approved" to 2026-08-28 04:11:04.155719029 +0000 UTC m=+351.165509426 I0828 04:11:04.198313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-124.nip.io-tls-jnzqn" condition "Ready" to 2026-08-28 04:11:04.198303257 +0000 UTC m=+351.208093624 I0828 04:11:04.230066 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:11:04.230046231 +0000 UTC m=+351.239836618 I0828 04:11:04.259953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:11:04.261582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:11:04.262108 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:11:04.26209944 +0000 UTC m=+351.271889827 I0828 04:11:04.274707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:11:04.274917 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:11:04.274911086 +0000 UTC m=+351.284701453 I0828 04:12:10.684616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:12:10.684660 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-28 04:12:10.684652708 +0000 UTC m=+417.694443065 I0828 04:12:10.684672 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-28 04:12:10.684648177 +0000 UTC m=+417.694438584 E0828 04:12:10.698233 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0828 04:12:10.698312 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-28 04:12:10.698302826 +0000 UTC m=+417.708093223 E0828 04:12:10.698344 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0828 04:12:10.701523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:10.701620 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-28 04:12:10.701607293 +0000 UTC m=+417.711397680 E0828 04:12:10.719568 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0828 04:12:10.719917 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0828 04:12:10.719975 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0828 04:12:10.720078 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0828 04:12:10.726101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:10.749213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sjskx" condition "Approved" to 2026-08-28 04:12:10.749198201 +0000 UTC m=+417.758988568 I0828 04:12:10.765201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sjskx" condition "Ready" to 2026-08-28 04:12:10.765183938 +0000 UTC m=+417.774974335 I0828 04:12:10.795342 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:10.795328967 +0000 UTC m=+417.805119314 I0828 04:12:10.809411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:10.809938 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:10.809928523 +0000 UTC m=+417.819718920 I0828 04:12:10.830895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:15.721048 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:15.721030079 +0000 UTC m=+422.730820476 I0828 04:12:56.073230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:12:56.073279 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-28 04:12:56.073274915 +0000 UTC m=+463.083065272 I0828 04:12:56.075660 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-28 04:12:56.075654183 +0000 UTC m=+463.085444540 I0828 04:12:56.076877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:12:56.076897 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-28 04:12:56.076894399 +0000 UTC m=+463.086684756 I0828 04:12:56.077320 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-28 04:12:56.077316682 +0000 UTC m=+463.087107039 I0828 04:12:56.077502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:12:56.077514 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-28 04:12:56.077512022 +0000 UTC m=+463.087302379 I0828 04:12:56.077688 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-28 04:12:56.077684972 +0000 UTC m=+463.087475319 I0828 04:12:56.112001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:56.112085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:12:56.112112 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-28 04:12:56.112105726 +0000 UTC m=+463.121896103 I0828 04:12:56.112565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:56.112617 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:12:56.112673 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-28 04:12:56.112669087 +0000 UTC m=+463.122459454 I0828 04:12:56.113645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:56.113870 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-28 04:12:56.11386385 +0000 UTC m=+463.123654207 I0828 04:12:56.342036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9rp74" condition "Approved" to 2026-08-28 04:12:56.34202813 +0000 UTC m=+463.351818487 I0828 04:12:56.369906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9rp74" condition "Ready" to 2026-08-28 04:12:56.369897841 +0000 UTC m=+463.379688188 I0828 04:12:56.377029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-shv2c" condition "Approved" to 2026-08-28 04:12:56.377019164 +0000 UTC m=+463.386809531 I0828 04:12:56.396831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:56.410432 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:56.410425984 +0000 UTC m=+463.420216341 I0828 04:12:56.420565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-shv2c" condition "Ready" to 2026-08-28 04:12:56.42055713 +0000 UTC m=+463.430347487 I0828 04:12:56.495470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:56.495661 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:56.495656435 +0000 UTC m=+463.505446792 I0828 04:12:56.508088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wdstm" condition "Approved" to 2026-08-28 04:12:56.508082174 +0000 UTC m=+463.517872531 I0828 04:12:56.510847 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:56.510842402 +0000 UTC m=+463.520632759 I0828 04:12:56.528832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wdstm" condition "Ready" to 2026-08-28 04:12:56.52882229 +0000 UTC m=+463.538612647 I0828 04:12:56.835957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:56.836228 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:56.836223408 +0000 UTC m=+463.846013765 E0828 04:12:57.042264 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-mjkds\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0828 04:12:57.277699 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:57.277683813 +0000 UTC m=+464.287474210 I0828 04:12:57.336014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:57.441171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:57.441487 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:12:57.441479975 +0000 UTC m=+464.451270332 I0828 04:12:57.790871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:57.839801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:12:57.893141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:13:08.549207 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls" condition "Ready" to 2026-08-28 04:13:08.549191834 +0000 UTC m=+475.558982191 I0828 04:13:08.549609 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:13:08.549626 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls" condition "Issuing" to 2026-08-28 04:13:08.549622498 +0000 UTC m=+475.559412855 I0828 04:13:08.563569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:13:08.563730 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls" condition "Ready" to 2026-08-28 04:13:08.563684475 +0000 UTC m=+475.573474842 I0828 04:13:09.063455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:13:09.103539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c8fc6-f7w4f" condition "Approved" to 2026-08-28 04:13:09.103523123 +0000 UTC m=+476.113313510 I0828 04:13:09.142731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c8fc6-f7w4f" condition "Ready" to 2026-08-28 04:13:09.142717304 +0000 UTC m=+476.152507691 I0828 04:13:09.166523 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:13:09.166509925 +0000 UTC m=+476.176300302 I0828 04:13:09.216808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c8fc6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:13:26.414179 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-28 04:13:26.414134446 +0000 UTC m=+493.423924813 I0828 04:13:26.414398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:13:26.415927 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-28 04:13:26.415904125 +0000 UTC m=+493.425694612 I0828 04:13:26.433115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:13:26.433822 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-28 04:13:26.433809729 +0000 UTC m=+493.443600086 I0828 04:13:26.610273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:13:26.638149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wqjd5" condition "Approved" to 2026-08-28 04:13:26.638136145 +0000 UTC m=+493.647926512 I0828 04:13:26.658070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wqjd5" condition "Ready" to 2026-08-28 04:13:26.658059201 +0000 UTC m=+493.667849568 I0828 04:13:26.693102 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:13:26.693090106 +0000 UTC m=+493.702880473 I0828 04:13:26.713683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:13:26.780895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:16:32.004942 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-28 04:16:32.00491711 +0000 UTC m=+679.014707497 I0828 04:16:32.005157 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:16:32.005304 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-28 04:16:32.005292505 +0000 UTC m=+679.015082892 I0828 04:16:32.024843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:16:32.024960 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:16:32.024991 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-28 04:16:32.024982843 +0000 UTC m=+679.034773230 I0828 04:16:32.194143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:16:32.205833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bdmnx" condition "Approved" to 2026-08-28 04:16:32.205824207 +0000 UTC m=+679.215614564 I0828 04:16:32.235194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bdmnx" condition "Ready" to 2026-08-28 04:16:32.235177945 +0000 UTC m=+679.244968302 I0828 04:16:32.273054 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:16:32.273036619 +0000 UTC m=+679.282826996 I0828 04:16:32.297719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:16:32.298145 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:16:32.2981364 +0000 UTC m=+679.307926787 I0828 04:16:32.318500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:16:32.320216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:17:14.153724 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-28 04:17:14.153710946 +0000 UTC m=+721.163501343 I0828 04:17:14.153796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:17:14.153903 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-28 04:17:14.153892905 +0000 UTC m=+721.163683302 I0828 04:17:14.188903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:17:14.189013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0828 04:17:14.189043 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-28 04:17:14.189034797 +0000 UTC m=+721.198825194 I0828 04:17:14.461700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:17:14.468388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jfcns" condition "Approved" to 2026-08-28 04:17:14.468367189 +0000 UTC m=+721.478157586 I0828 04:17:14.490175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jfcns" condition "Ready" to 2026-08-28 04:17:14.490164213 +0000 UTC m=+721.499954570 I0828 04:17:14.525654 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:17:14.525644573 +0000 UTC m=+721.535434920 I0828 04:17:14.546560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:17:14.546941 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:17:14.54693418 +0000 UTC m=+721.556724547 I0828 04:17:14.565458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0828 04:17:14.565851 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-28 04:17:14.565845031 +0000 UTC m=+721.575635388