I0908 15:45:35.528827 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0908 15:45:35.528934 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0908 15:45:35.528976 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0908 15:45:35.536441 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0908 15:45:35.536960 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0908 15:45:35.537166 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0908 15:45:35.537177 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0908 15:45:35.540914 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0908 15:45:35.557634 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0908 15:45:35.558139 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0908 15:45:35.563653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0908 15:45:35.578643 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0908 15:45:35.585579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0908 15:45:35.588328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0908 15:45:35.590643 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0908 15:45:35.590685 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0908 15:45:35.590822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0908 15:45:35.593372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0908 15:45:35.601437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0908 15:45:35.607312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0908 15:45:35.615130 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0908 15:45:35.615197 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0908 15:45:35.620926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0908 15:45:35.626338 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0908 15:45:35.630402 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0908 15:45:35.634685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0908 15:45:35.645563 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0908 15:45:35.645639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0908 15:45:35.648699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0908 15:45:35.651202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0908 15:45:35.660969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0908 15:45:35.668152 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0908 15:45:35.668236 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0908 15:45:35.671490 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.672155 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.672426 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.673764 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.723198 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.742908 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.757861 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.775599 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.794920 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:35.797168 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0908 15:45:47.535301 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-08 15:45:47.535287099 +0000 UTC m=+12.040995206 I0908 15:45:48.322716 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-08 15:45:48.322706787 +0000 UTC m=+12.828414884 I0908 15:45:48.323399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:45:48.323420 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-08 15:45:48.323416345 +0000 UTC m=+12.829124442 E0908 15:45:48.338293 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 15:45:48.338397 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-08 15:45:48.338386237 +0000 UTC m=+12.844094374 E0908 15:45:48.338431 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 15:45:48.343934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:45:48.344263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:45:48.344293 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-08 15:45:48.344285094 +0000 UTC m=+12.849993221 E0908 15:45:48.349281 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0908 15:45:48.349737 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:45:48.349980 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:45:48.350265 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0908 15:45:48.385850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l7vkd" condition "Approved" to 2026-09-08 15:45:48.385841077 +0000 UTC m=+12.891549164 I0908 15:45:48.397291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l7vkd" condition "Ready" to 2026-09-08 15:45:48.397276932 +0000 UTC m=+12.902985039 I0908 15:45:48.425984 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:45:48.425969425 +0000 UTC m=+12.931677572 I0908 15:45:48.442378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:45:48.442703 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:45:48.442697911 +0000 UTC m=+12.948406008 I0908 15:45:48.459473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:45:48.459703 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:45:48.459696784 +0000 UTC m=+12.965404881 I0908 15:45:53.350059 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:45:53.350041846 +0000 UTC m=+17.855749973 I0908 15:46:16.850880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:46:16.850874 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-08 15:46:16.850834565 +0000 UTC m=+41.356542682 I0908 15:46:16.850962 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-08 15:46:16.850930167 +0000 UTC m=+41.356638274 I0908 15:46:16.870456 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-08 15:46:16.870413724 +0000 UTC m=+41.376121821 I0908 15:46:16.882493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:46:16.882616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:46:16.882698 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-08 15:46:16.882690334 +0000 UTC m=+41.388398431 I0908 15:46:17.289260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:46:17.303251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t4h4r" condition "Approved" to 2026-09-08 15:46:17.303230437 +0000 UTC m=+41.808938554 I0908 15:46:17.337757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t4h4r" condition "Ready" to 2026-09-08 15:46:17.33774803 +0000 UTC m=+41.843456117 I0908 15:46:17.366962 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:46:17.366905573 +0000 UTC m=+41.872613670 I0908 15:46:17.393613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:51:10.615223 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-196.nip.io-tls" condition "Ready" to 2026-09-08 15:51:10.615142284 +0000 UTC m=+335.120850421 I0908 15:51:10.615681 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-196.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:51:10.615850 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-196.nip.io-tls" condition "Issuing" to 2026-09-08 15:51:10.615840775 +0000 UTC m=+335.121548882 I0908 15:51:10.637160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:51:10.637241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-196.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:51:10.637269 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-196.nip.io-tls" condition "Issuing" to 2026-09-08 15:51:10.637258299 +0000 UTC m=+335.142966426 I0908 15:51:10.834212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-196.nip.io-tls-2h5pt" condition "Approved" to 2026-09-08 15:51:10.834182445 +0000 UTC m=+335.339890582 I0908 15:51:10.868687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-196.nip.io-tls-2h5pt" condition "Ready" to 2026-09-08 15:51:10.8686685 +0000 UTC m=+335.374376607 I0908 15:51:10.902504 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-196.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:51:10.902481525 +0000 UTC m=+335.408189662 I0908 15:51:10.924599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-196.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-196.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:52:26.398990 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-08 15:52:26.398769039 +0000 UTC m=+410.904477156 I0908 15:52:26.399118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:52:26.399286 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-08 15:52:26.399267972 +0000 UTC m=+410.904976109 E0908 15:52:26.416546 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 15:52:26.416659 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-08 15:52:26.41664728 +0000 UTC m=+410.922355417 E0908 15:52:26.416696 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 15:52:26.421228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:52:26.421674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:52:26.422849 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-08 15:52:26.42283337 +0000 UTC m=+410.928541547 E0908 15:52:26.434960 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0908 15:52:26.435138 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:52:26.435308 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:52:26.435402 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0908 15:52:26.471769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:52:26.476873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s5sx4" condition "Approved" to 2026-09-08 15:52:26.476858006 +0000 UTC m=+410.982566113 I0908 15:52:26.497782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s5sx4" condition "Ready" to 2026-09-08 15:52:26.49776694 +0000 UTC m=+411.003475047 I0908 15:52:26.518353 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:52:26.518337176 +0000 UTC m=+411.024045303 I0908 15:52:26.534605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:52:31.435409 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:52:31.43539648 +0000 UTC m=+415.941104577 I0908 15:53:17.981817 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-08 15:53:17.981803395 +0000 UTC m=+462.487511492 I0908 15:53:17.982352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:17.982398 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-08 15:53:17.98239018 +0000 UTC m=+462.488098267 I0908 15:53:17.984087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:17.984113 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-08 15:53:17.984110417 +0000 UTC m=+462.489818514 I0908 15:53:17.984221 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-08 15:53:17.981844246 +0000 UTC m=+462.487552333 I0908 15:53:18.004502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:18.011475 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-08 15:53:18.01144578 +0000 UTC m=+462.517153877 I0908 15:53:18.004495 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-08 15:53:18.004473943 +0000 UTC m=+462.510182050 I0908 15:53:18.036960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:18.037055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:18.037132 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-08 15:53:18.037124709 +0000 UTC m=+462.542832816 I0908 15:53:18.055161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:18.055213 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-08 15:53:18.055206784 +0000 UTC m=+462.560914871 I0908 15:53:18.055595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:18.055685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:18.055710 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-08 15:53:18.055703577 +0000 UTC m=+462.561411674 I0908 15:53:18.185189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:18.186810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wpnqw" condition "Approved" to 2026-09-08 15:53:18.186802273 +0000 UTC m=+462.692510370 I0908 15:53:18.201429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wpnqw" condition "Ready" to 2026-09-08 15:53:18.201417485 +0000 UTC m=+462.707125582 I0908 15:53:18.225726 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:18.225710157 +0000 UTC m=+462.731418244 I0908 15:53:18.268315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:18.363738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:18.385257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kqds7" condition "Approved" to 2026-09-08 15:53:18.385243276 +0000 UTC m=+462.890951373 I0908 15:53:18.388534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:18.400453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vjhkc" condition "Approved" to 2026-09-08 15:53:18.400435774 +0000 UTC m=+462.906143871 I0908 15:53:18.409465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kqds7" condition "Ready" to 2026-09-08 15:53:18.409452746 +0000 UTC m=+462.915160843 I0908 15:53:18.421667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vjhkc" condition "Ready" to 2026-09-08 15:53:18.421654633 +0000 UTC m=+462.927362730 I0908 15:53:18.969693 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:18.969670801 +0000 UTC m=+463.475378918 I0908 15:53:19.068553 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:19.068530582 +0000 UTC m=+463.574238699 I0908 15:53:19.219588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:19.220011 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:19.220000723 +0000 UTC m=+463.725708830 I0908 15:53:19.317626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:19.318031 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:19.318022451 +0000 UTC m=+463.823730548 I0908 15:53:19.666625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:19.768805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:19.826038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:27.600124 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" condition "Ready" to 2026-09-08 15:53:27.600057526 +0000 UTC m=+472.105765633 I0908 15:53:27.600552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:27.600571 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" condition "Issuing" to 2026-09-08 15:53:27.600564139 +0000 UTC m=+472.106272246 I0908 15:53:27.625120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:27.625226 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" condition "Ready" to 2026-09-08 15:53:27.625216518 +0000 UTC m=+472.130924615 I0908 15:53:27.812226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:28.069354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vxlgd-pr6sk" condition "Approved" to 2026-09-08 15:53:28.06933836 +0000 UTC m=+472.575046477 I0908 15:53:28.234262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vxlgd-pr6sk" condition "Ready" to 2026-09-08 15:53:28.234246607 +0000 UTC m=+472.739954724 I0908 15:53:28.279084 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:28.279061414 +0000 UTC m=+472.784769511 I0908 15:53:28.312599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:28.313049 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:28.313031112 +0000 UTC m=+472.818739209 I0908 15:53:28.336106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:28.337135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vxlgd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:42.217096 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-08 15:53:42.217075693 +0000 UTC m=+486.722783800 I0908 15:53:42.217567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:42.217727 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-08 15:53:42.217610837 +0000 UTC m=+486.723318934 I0908 15:53:42.250902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:42.251037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:42.251059 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-08 15:53:42.251052817 +0000 UTC m=+486.756760914 I0908 15:53:42.679172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h88pg" condition "Approved" to 2026-09-08 15:53:42.679158632 +0000 UTC m=+487.184866729 I0908 15:53:42.706348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h88pg" condition "Ready" to 2026-09-08 15:53:42.706332494 +0000 UTC m=+487.212040591 I0908 15:53:42.746286 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:42.746271256 +0000 UTC m=+487.251979353 I0908 15:53:42.763806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:42.764198 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:42.764191553 +0000 UTC m=+487.269899650 I0908 15:53:42.794487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:57:14.426085 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-08 15:57:14.426069299 +0000 UTC m=+698.931777406 I0908 15:57:14.426637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:57:14.426750 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-08 15:57:14.426737408 +0000 UTC m=+698.932445545 I0908 15:57:14.449166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:57:14.449440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:57:14.449486 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-08 15:57:14.449476337 +0000 UTC m=+698.955184444 I0908 15:57:14.753716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:57:14.763419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g52gf" condition "Approved" to 2026-09-08 15:57:14.763398723 +0000 UTC m=+699.269106850 I0908 15:57:14.784650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g52gf" condition "Ready" to 2026-09-08 15:57:14.78463652 +0000 UTC m=+699.290344627 I0908 15:57:14.820101 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:57:14.820088415 +0000 UTC m=+699.325796522 I0908 15:57:14.848781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:57:59.481745 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-08 15:57:59.48158102 +0000 UTC m=+743.987289147 I0908 15:57:59.481994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:57:59.482031 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-08 15:57:59.482020823 +0000 UTC m=+743.987728920 I0908 15:57:59.504788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:57:59.504863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:57:59.504881 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-08 15:57:59.504874316 +0000 UTC m=+744.010582413 I0908 15:57:59.798579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6zcf5" condition "Approved" to 2026-09-08 15:57:59.798559227 +0000 UTC m=+744.304267324 I0908 15:57:59.821609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-6zcf5" condition "Ready" to 2026-09-08 15:57:59.821595405 +0000 UTC m=+744.327303502 I0908 15:57:59.874274 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:57:59.874262015 +0000 UTC m=+744.379970112 I0908 15:57:59.904070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:57:59.904392 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:57:59.90438409 +0000 UTC m=+744.410092187 I0908 15:57:59.927507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"