I0824 15:40:38.782863 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0824 15:40:38.783923 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0824 15:40:38.785541 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0824 15:40:38.791185 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0824 15:40:38.791724 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0824 15:40:38.791849 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0824 15:40:38.791970 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0824 15:40:38.794797 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0824 15:40:38.808136 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0824 15:40:38.808460 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0824 15:40:38.812135 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0824 15:40:38.819843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0824 15:40:38.828573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0824 15:40:38.831419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0824 15:40:38.834020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0824 15:40:38.836685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0824 15:40:38.838649 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0824 15:40:38.838731 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0824 15:40:38.840915 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0824 15:40:38.842817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0824 15:40:38.849206 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0824 15:40:38.852442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0824 15:40:38.855029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0824 15:40:38.857976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0824 15:40:38.860643 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0824 15:40:38.860725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0824 15:40:38.862772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0824 15:40:38.864802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0824 15:40:38.866612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0824 15:40:38.870067 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0824 15:40:38.870114 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0824 15:40:38.870224 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0824 15:40:38.870422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0824 15:40:38.874497 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.875394 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.876764 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.876910 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.876914 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.877255 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.877347 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.877591 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.879715 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:38.974244 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 15:40:53.665185 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-24 15:40:53.665171474 +0000 UTC m=+14.925280931 I0824 15:40:54.374267 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-24 15:40:54.374254825 +0000 UTC m=+15.634364312 I0824 15:40:54.374427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:40:54.374504 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-24 15:40:54.374489099 +0000 UTC m=+15.634598606 E0824 15:40:54.388631 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 15:40:54.388727 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-24 15:40:54.388718515 +0000 UTC m=+15.648827992 E0824 15:40:54.388757 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 15:40:54.392628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:40:54.392892 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-24 15:40:54.392880694 +0000 UTC m=+15.652990191 E0824 15:40:54.402024 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0824 15:40:54.402087 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:40:54.402108 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:40:54.402136 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0824 15:40:54.408318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:40:54.430309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-49986" condition "Approved" to 2026-08-24 15:40:54.430297323 +0000 UTC m=+15.690406800 I0824 15:40:54.444788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-49986" condition "Ready" to 2026-08-24 15:40:54.444777842 +0000 UTC m=+15.704887319 I0824 15:40:54.475496 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:40:54.475486385 +0000 UTC m=+15.735595862 I0824 15:40:54.501910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:40:54.502420 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:40:54.502413912 +0000 UTC m=+15.762523389 I0824 15:40:54.512399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:40:54.519379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:40:54.519683 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:40:54.519675221 +0000 UTC m=+15.779784698 I0824 15:40:59.403225 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:40:59.403206716 +0000 UTC m=+20.663316213 I0824 15:41:22.568697 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-24 15:41:22.568674072 +0000 UTC m=+43.828783539 I0824 15:41:22.569014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:41:22.569034 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-24 15:41:22.569031107 +0000 UTC m=+43.829140574 I0824 15:41:22.579127 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-24 15:41:22.579116492 +0000 UTC m=+43.839225969 I0824 15:41:22.600291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:41:22.600353 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-24 15:41:22.600346627 +0000 UTC m=+43.860456104 I0824 15:41:22.926822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:41:22.957603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ptzkt" condition "Approved" to 2026-08-24 15:41:22.957591768 +0000 UTC m=+44.217701235 I0824 15:41:22.999620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ptzkt" condition "Ready" to 2026-08-24 15:41:22.999609573 +0000 UTC m=+44.259719050 I0824 15:41:23.036298 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:41:23.036285345 +0000 UTC m=+44.296394842 I0824 15:41:23.072261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:41:23.072671 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:41:23.072665273 +0000 UTC m=+44.332774750 I0824 15:41:23.093126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:41:23.095305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:41:23.095584 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:41:23.09557859 +0000 UTC m=+44.355688067 I0824 15:41:23.096135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:46:00.429181 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-118.nip.io-tls" condition "Ready" to 2026-08-24 15:46:00.429141215 +0000 UTC m=+321.689250682 I0824 15:46:00.429734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-118.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:46:00.429762 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-118.nip.io-tls" condition "Issuing" to 2026-08-24 15:46:00.429756077 +0000 UTC m=+321.689865554 I0824 15:46:00.451364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-118.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-118.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:46:00.451438 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-118.nip.io-tls" condition "Ready" to 2026-08-24 15:46:00.451430529 +0000 UTC m=+321.711540006 I0824 15:46:00.583825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-118.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-118.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:46:00.616298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-118.nip.io-tls-4hb7g" condition "Approved" to 2026-08-24 15:46:00.616283457 +0000 UTC m=+321.876392964 I0824 15:46:00.645345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-118.nip.io-tls-4hb7g" condition "Ready" to 2026-08-24 15:46:00.645328626 +0000 UTC m=+321.905438133 I0824 15:46:00.671284 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-118.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:46:00.671269523 +0000 UTC m=+321.931379020 I0824 15:46:00.694377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-118.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-118.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:46:00.694653 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-118.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:46:00.69464699 +0000 UTC m=+321.954756467 I0824 15:46:00.714231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-118.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-118.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:04.638857 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-24 15:47:04.638833423 +0000 UTC m=+385.898942900 I0824 15:47:04.639021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:47:04.639095 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-24 15:47:04.639087707 +0000 UTC m=+385.899197184 E0824 15:47:04.653895 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 15:47:04.653981 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-24 15:47:04.653970416 +0000 UTC m=+385.914079893 E0824 15:47:04.654016 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 15:47:04.657643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:04.657759 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-24 15:47:04.657749845 +0000 UTC m=+385.917859332 E0824 15:47:04.673270 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0824 15:47:04.673343 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:47:04.673365 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:47:04.673396 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0824 15:47:04.675583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:04.698153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n22pp" condition "Approved" to 2026-08-24 15:47:04.698137864 +0000 UTC m=+385.958247371 I0824 15:47:04.712098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n22pp" condition "Ready" to 2026-08-24 15:47:04.712086896 +0000 UTC m=+385.972196373 I0824 15:47:04.732652 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:47:04.732631407 +0000 UTC m=+385.992740914 I0824 15:47:04.752706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:04.753156 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:47:04.753146548 +0000 UTC m=+386.013256025 I0824 15:47:04.770715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:04.771274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:09.674469 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:47:09.6744595 +0000 UTC m=+390.934568967 I0824 15:47:50.618149 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-24 15:47:50.618106311 +0000 UTC m=+431.878215778 I0824 15:47:50.618234 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:47:50.618820 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-24 15:47:50.618538128 +0000 UTC m=+431.878647645 I0824 15:47:50.636654 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-24 15:47:50.63664264 +0000 UTC m=+431.896752107 I0824 15:47:50.636830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:47:50.636848 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-24 15:47:50.636844814 +0000 UTC m=+431.896954281 I0824 15:47:50.637635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:47:50.647677 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-24 15:47:50.637650207 +0000 UTC m=+431.897759674 I0824 15:47:50.647925 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-24 15:47:50.647911944 +0000 UTC m=+431.908021411 I0824 15:47:50.649551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:50.649930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:47:50.649949 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-24 15:47:50.649945498 +0000 UTC m=+431.910054965 I0824 15:47:50.671239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:50.671275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:47:50.671286 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-24 15:47:50.671282195 +0000 UTC m=+431.931391662 I0824 15:47:50.674270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:50.674307 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-24 15:47:50.674302807 +0000 UTC m=+431.934412274 I0824 15:47:50.815987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x7m5b" condition "Approved" to 2026-08-24 15:47:50.815960973 +0000 UTC m=+432.076070460 I0824 15:47:50.850896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x7m5b" condition "Ready" to 2026-08-24 15:47:50.850886523 +0000 UTC m=+432.110996000 I0824 15:47:50.858555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nxkf7" condition "Approved" to 2026-08-24 15:47:50.858546625 +0000 UTC m=+432.118656102 I0824 15:47:50.865549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:50.876911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nxkf7" condition "Ready" to 2026-08-24 15:47:50.87690076 +0000 UTC m=+432.137010237 I0824 15:47:50.882697 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:47:50.882688699 +0000 UTC m=+432.142798186 I0824 15:47:50.903454 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:47:50.903441127 +0000 UTC m=+432.163550594 I0824 15:47:50.909502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:50.910004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ds8bd" condition "Approved" to 2026-08-24 15:47:50.909997979 +0000 UTC m=+432.170107446 I0824 15:47:50.933334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:51.035795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ds8bd" condition "Ready" to 2026-08-24 15:47:51.035777741 +0000 UTC m=+432.295887218 I0824 15:47:51.812209 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:47:51.812195708 +0000 UTC m=+433.072305175 I0824 15:47:52.105484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:52.105878 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:47:52.10587152 +0000 UTC m=+433.365980987 I0824 15:47:52.131752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:52.178243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:52.382791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:59.746827 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" condition "Ready" to 2026-08-24 15:47:59.746802501 +0000 UTC m=+441.006911978 I0824 15:47:59.747223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:47:59.747287 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" condition "Issuing" to 2026-08-24 15:47:59.747275239 +0000 UTC m=+441.007384746 I0824 15:47:59.761714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-45xhf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:47:59.762071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:47:59.762114 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" condition "Issuing" to 2026-08-24 15:47:59.762108692 +0000 UTC m=+441.022218159 I0824 15:48:00.188747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-45xhf-z69j7" condition "Approved" to 2026-08-24 15:48:00.188733655 +0000 UTC m=+441.448843142 I0824 15:48:00.203640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-45xhf-z69j7" condition "Ready" to 2026-08-24 15:48:00.203632539 +0000 UTC m=+441.463742006 I0824 15:48:00.239112 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:48:00.239098473 +0000 UTC m=+441.499207950 I0824 15:48:00.266047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-45xhf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:48:00.320147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-45xhf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-45xhf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:48:17.288413 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-24 15:48:17.288397344 +0000 UTC m=+458.548506821 I0824 15:48:17.288505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:48:17.288547 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-24 15:48:17.288537866 +0000 UTC m=+458.548647343 I0824 15:48:17.308150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:48:17.308218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:48:17.308231 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-24 15:48:17.308225537 +0000 UTC m=+458.568335004 I0824 15:48:17.614262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-98ppb" condition "Approved" to 2026-08-24 15:48:17.614249361 +0000 UTC m=+458.874358838 I0824 15:48:17.642219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-98ppb" condition "Ready" to 2026-08-24 15:48:17.642209051 +0000 UTC m=+458.902318538 I0824 15:48:17.671901 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:48:17.671886399 +0000 UTC m=+458.931995876 I0824 15:48:17.698744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:51:23.401185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:51:23.401217 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-24 15:51:23.401210195 +0000 UTC m=+644.661319672 I0824 15:51:23.401880 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-24 15:51:23.40187452 +0000 UTC m=+644.661983997 I0824 15:51:23.420522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:51:23.420637 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-24 15:51:23.420629135 +0000 UTC m=+644.680738612 I0824 15:51:23.724270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:51:23.762877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kg9mf" condition "Approved" to 2026-08-24 15:51:23.762861944 +0000 UTC m=+645.022971431 I0824 15:51:23.777069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kg9mf" condition "Ready" to 2026-08-24 15:51:23.777060388 +0000 UTC m=+645.037169855 I0824 15:51:23.799063 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:51:23.799047425 +0000 UTC m=+645.059156902 I0824 15:51:23.821334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:51:23.821690 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:51:23.821683476 +0000 UTC m=+645.081792953 I0824 15:51:23.835219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:51:23.835661 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:51:23.835653182 +0000 UTC m=+645.095762659 I0824 15:52:02.600454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:52:02.600539 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-24 15:52:02.600526651 +0000 UTC m=+683.860636148 I0824 15:52:02.601222 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-24 15:52:02.601213574 +0000 UTC m=+683.861323071 I0824 15:52:02.623652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:52:02.623735 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-24 15:52:02.623726249 +0000 UTC m=+683.883835716 I0824 15:52:02.706490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:52:02.745915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9k2r2" condition "Approved" to 2026-08-24 15:52:02.745905734 +0000 UTC m=+684.006015201 I0824 15:52:02.765348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-9k2r2" condition "Ready" to 2026-08-24 15:52:02.76533137 +0000 UTC m=+684.025440847 I0824 15:52:02.793137 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:52:02.793122418 +0000 UTC m=+684.053231885 I0824 15:52:02.816684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"