I0821 02:24:09.924275 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0821 02:24:09.924502 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0821 02:24:09.924616 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0821 02:24:09.928096 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0821 02:24:09.928485 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0821 02:24:09.928672 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0821 02:24:09.928695 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0821 02:24:09.931176 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0821 02:24:09.949629 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0821 02:24:09.955921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0821 02:24:09.965857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0821 02:24:09.969041 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0821 02:24:09.972235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0821 02:24:09.975084 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0821 02:24:09.975162 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0821 02:24:09.978035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0821 02:24:09.981056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0821 02:24:09.987421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0821 02:24:09.990164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0821 02:24:09.992102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0821 02:24:09.993838 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0821 02:24:09.993958 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0821 02:24:09.995920 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0821 02:24:09.997941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0821 02:24:10.000150 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0821 02:24:10.010484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0821 02:24:10.010501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0821 02:24:10.013256 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0821 02:24:10.013307 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0821 02:24:10.013316 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0821 02:24:10.013423 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0821 02:24:10.015710 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0821 02:24:10.016242 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0821 02:24:10.020833 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.020832 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.022300 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.037665 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.057484 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.078383 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.091358 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.113197 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.120547 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:10.127954 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:24:22.637261 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-21 02:24:22.637248785 +0000 UTC m=+12.751995595 I0821 02:24:23.437253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:24:23.437311 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-21 02:24:23.437304111 +0000 UTC m=+13.552050921 I0821 02:24:23.437362 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-21 02:24:23.437349522 +0000 UTC m=+13.552096362 E0821 02:24:23.453453 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0821 02:24:23.453611 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-21 02:24:23.453583582 +0000 UTC m=+13.568330392 I0821 02:24:23.453670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:24:23.453715 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-21 02:24:23.453709045 +0000 UTC m=+13.568455855 E0821 02:24:23.453667 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:24:23.469870 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0821 02:24:23.469968 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:24:23.470015 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:24:23.470057 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0821 02:24:23.473886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:24:23.498006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-886tc" condition "Approved" to 2026-08-21 02:24:23.497987937 +0000 UTC m=+13.612734767 I0821 02:24:23.513636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-886tc" condition "Ready" to 2026-08-21 02:24:23.513626085 +0000 UTC m=+13.628372895 I0821 02:24:23.543991 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:24:23.543978839 +0000 UTC m=+13.658725639 I0821 02:24:23.563593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:24:23.612401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:24:28.471236 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:24:28.471201274 +0000 UTC m=+18.585948104 I0821 02:24:48.690316 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-21 02:24:48.690301978 +0000 UTC m=+38.805048788 I0821 02:24:48.690911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:24:48.691081 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-21 02:24:48.690997214 +0000 UTC m=+38.805744034 I0821 02:24:48.718079 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-21 02:24:48.718064622 +0000 UTC m=+38.832811422 I0821 02:24:48.719464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:24:48.721366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:24:48.721539 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-21 02:24:48.721530582 +0000 UTC m=+38.836277402 I0821 02:24:48.861560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:24:48.870498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dztgj" condition "Approved" to 2026-08-21 02:24:48.870486375 +0000 UTC m=+38.985233185 I0821 02:24:48.900121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dztgj" condition "Ready" to 2026-08-21 02:24:48.900104942 +0000 UTC m=+39.014851772 I0821 02:24:48.933139 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:24:48.933125827 +0000 UTC m=+39.047872637 I0821 02:24:48.963190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:24:48.963565 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:24:48.963558442 +0000 UTC m=+39.078305252 I0821 02:24:48.983538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:28:52.334668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-204.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:28:52.334794 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Issuing" to 2026-08-21 02:28:52.334769878 +0000 UTC m=+282.449516708 I0821 02:28:52.334979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Ready" to 2026-08-21 02:28:52.334966093 +0000 UTC m=+282.449712903 I0821 02:28:52.353095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:28:52.353198 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Ready" to 2026-08-21 02:28:52.353190689 +0000 UTC m=+282.467937499 I0821 02:28:52.510025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:28:52.544418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-204.nip.io-tls-7745d" condition "Approved" to 2026-08-21 02:28:52.544403571 +0000 UTC m=+282.659150411 I0821 02:28:52.573236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-204.nip.io-tls-7745d" condition "Ready" to 2026-08-21 02:28:52.573222658 +0000 UTC m=+282.687969498 I0821 02:28:52.599109 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:28:52.599091119 +0000 UTC m=+282.713837959 I0821 02:28:52.620538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:28:52.620891 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:28:52.620884736 +0000 UTC m=+282.735631536 I0821 02:28:52.635564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:28:52.635833 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-204.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:28:52.635826747 +0000 UTC m=+282.750573557 I0821 02:30:03.298329 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-21 02:30:03.298307954 +0000 UTC m=+353.413054754 I0821 02:30:03.298671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:03.298728 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-21 02:30:03.298715674 +0000 UTC m=+353.413462504 E0821 02:30:03.312084 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0821 02:30:03.312124 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-21 02:30:03.312116179 +0000 UTC m=+353.426862989 E0821 02:30:03.312170 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0821 02:30:03.314188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:03.314266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:03.314286 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-21 02:30:03.314281259 +0000 UTC m=+353.429028059 E0821 02:30:03.322657 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0821 02:30:03.322961 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:30:03.323105 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:30:03.323237 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0821 02:30:03.355274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s8722" condition "Approved" to 2026-08-21 02:30:03.355256373 +0000 UTC m=+353.470003213 I0821 02:30:03.369452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s8722" condition "Ready" to 2026-08-21 02:30:03.369440036 +0000 UTC m=+353.484186846 I0821 02:30:03.401565 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:03.401548759 +0000 UTC m=+353.516295569 I0821 02:30:03.416397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:03.416784 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:03.416767806 +0000 UTC m=+353.531514616 I0821 02:30:03.434599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:08.324791 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:08.324773522 +0000 UTC m=+358.439520362 I0821 02:30:48.389600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:48.392911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-21 02:30:48.392902463 +0000 UTC m=+398.507649263 I0821 02:30:48.390018 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-21 02:30:48.389989616 +0000 UTC m=+398.504736436 I0821 02:30:48.390100 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-21 02:30:48.390095749 +0000 UTC m=+398.504842549 I0821 02:30:48.390202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:48.390222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:48.390284 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-21 02:30:48.390279923 +0000 UTC m=+398.505026723 I0821 02:30:48.394044 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-21 02:30:48.394034739 +0000 UTC m=+398.508781559 I0821 02:30:48.396968 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-21 02:30:48.396962546 +0000 UTC m=+398.511709346 I0821 02:30:48.499821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:48.499860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:48.499872 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-21 02:30:48.499867703 +0000 UTC m=+398.614614503 I0821 02:30:48.501524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:48.501566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:48.501580 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-21 02:30:48.501576771 +0000 UTC m=+398.616323571 I0821 02:30:48.501857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:48.502071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:48.502090 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-21 02:30:48.502086962 +0000 UTC m=+398.616833762 I0821 02:30:48.734934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zss9x" condition "Approved" to 2026-08-21 02:30:48.734926042 +0000 UTC m=+398.849672832 I0821 02:30:48.774965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zss9x" condition "Ready" to 2026-08-21 02:30:48.774956055 +0000 UTC m=+398.889702855 I0821 02:30:48.795810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sq6qk" condition "Approved" to 2026-08-21 02:30:48.79580134 +0000 UTC m=+398.910548140 I0821 02:30:48.808230 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:48.808220484 +0000 UTC m=+398.922967284 I0821 02:30:48.814973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sq6qk" condition "Ready" to 2026-08-21 02:30:48.814966407 +0000 UTC m=+398.929713217 I0821 02:30:48.834046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:48.835082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7f466" condition "Approved" to 2026-08-21 02:30:48.835072625 +0000 UTC m=+398.949819435 I0821 02:30:48.851473 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:48.851458139 +0000 UTC m=+398.966204939 I0821 02:30:48.856677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7f466" condition "Ready" to 2026-08-21 02:30:48.856664068 +0000 UTC m=+398.971410868 I0821 02:30:49.105299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:49.105632 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:49.105625905 +0000 UTC m=+399.220372715 E0821 02:30:49.502441 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-sddt4\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0821 02:30:49.557359 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:49.557341735 +0000 UTC m=+399.672088565 I0821 02:30:49.606811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:49.856414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:49.856917 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:49.856910166 +0000 UTC m=+399.971656976 I0821 02:30:50.107130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:31:00.506244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-64t7k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:31:00.506275 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-64t7k-tls" condition "Issuing" to 2026-08-21 02:31:00.506267225 +0000 UTC m=+410.621014035 I0821 02:31:00.506266 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-64t7k-tls" condition "Ready" to 2026-08-21 02:31:00.506241865 +0000 UTC m=+410.620988675 I0821 02:31:00.530214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-64t7k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-64t7k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:31:00.530291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-64t7k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:31:00.530309 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-64t7k-tls" condition "Issuing" to 2026-08-21 02:31:00.530304594 +0000 UTC m=+410.645051394 I0821 02:31:00.754597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-64t7k-mbr4p" condition "Approved" to 2026-08-21 02:31:00.754582807 +0000 UTC m=+410.869329617 I0821 02:31:00.778095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-64t7k-mbr4p" condition "Ready" to 2026-08-21 02:31:00.778084343 +0000 UTC m=+410.892831153 I0821 02:31:00.818416 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-64t7k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:31:00.818403593 +0000 UTC m=+410.933150403 I0821 02:31:00.844207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-64t7k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-64t7k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:31:19.741060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:31:19.741090 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-21 02:31:19.741080717 +0000 UTC m=+429.855827517 I0821 02:31:19.741372 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-21 02:31:19.741369114 +0000 UTC m=+429.856115904 I0821 02:31:19.771311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:31:19.771387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:31:19.771429 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-21 02:31:19.771421958 +0000 UTC m=+429.886168778 I0821 02:31:20.013629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n8j92" condition "Approved" to 2026-08-21 02:31:20.013616061 +0000 UTC m=+430.128362871 I0821 02:31:20.037964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n8j92" condition "Ready" to 2026-08-21 02:31:20.037815153 +0000 UTC m=+430.152561963 I0821 02:31:20.066077 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:31:20.066066827 +0000 UTC m=+430.180813627 I0821 02:31:20.088347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:31:20.144114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:21.019111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:34:21.019234 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-21 02:34:21.019212276 +0000 UTC m=+611.133959086 I0821 02:34:21.019448 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-21 02:34:21.019431161 +0000 UTC m=+611.134177961 I0821 02:34:21.038470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:21.038592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:34:21.038619 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-21 02:34:21.038611348 +0000 UTC m=+611.153358158 I0821 02:34:21.259440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:21.266348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nsg5b" condition "Approved" to 2026-08-21 02:34:21.266339467 +0000 UTC m=+611.381086267 I0821 02:34:21.283012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nsg5b" condition "Ready" to 2026-08-21 02:34:21.283001927 +0000 UTC m=+611.397748727 I0821 02:34:21.310291 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:34:21.310282699 +0000 UTC m=+611.425029499 I0821 02:34:21.334327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:21.334647 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:34:21.334639804 +0000 UTC m=+611.449386614 I0821 02:34:21.342985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:21.357218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:59.319632 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-21 02:34:59.319575704 +0000 UTC m=+649.434322534 I0821 02:34:59.319672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:34:59.319704 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-21 02:34:59.319696147 +0000 UTC m=+649.434442957 I0821 02:34:59.338411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:59.338494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:34:59.338518 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-21 02:34:59.338508856 +0000 UTC m=+649.453255696 I0821 02:34:59.525851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bvk7b" condition "Approved" to 2026-08-21 02:34:59.525834044 +0000 UTC m=+649.640580844 I0821 02:34:59.555676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bvk7b" condition "Ready" to 2026-08-21 02:34:59.555663283 +0000 UTC m=+649.670410083 I0821 02:34:59.587209 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:34:59.587189242 +0000 UTC m=+649.701936042 I0821 02:34:59.620686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:59.621049 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:34:59.621041684 +0000 UTC m=+649.735788504 I0821 02:34:59.627031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:34:59.641573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"