I0816 12:49:49.966187 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0816 12:49:49.966348 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0816 12:49:49.966468 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0816 12:49:49.971868 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0816 12:49:49.972474 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0816 12:49:49.972482 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0816 12:49:49.972564 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0816 12:49:49.975902 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0816 12:49:49.993697 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0816 12:49:49.998095 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0816 12:49:50.003643 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0816 12:49:50.006942 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0816 12:49:50.009382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0816 12:49:50.011375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0816 12:49:50.013660 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0816 12:49:50.013694 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0816 12:49:50.013747 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0816 12:49:50.013698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0816 12:49:50.016221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0816 12:49:50.018256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0816 12:49:50.024869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0816 12:49:50.028134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0816 12:49:50.030933 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0816 12:49:50.031012 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0816 12:49:50.031045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0816 12:49:50.033875 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0816 12:49:50.036441 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0816 12:49:50.036640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0816 12:49:50.038537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0816 12:49:50.040526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0816 12:49:50.042084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0816 12:49:50.049994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0816 12:49:50.053958 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0816 12:49:50.056725 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.057252 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.059024 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.082476 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.095736 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.111629 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.127858 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.143140 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.150458 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:49:50.167018 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:50:07.111125 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-16 12:50:07.111105682 +0000 UTC m=+17.189494352 I0816 12:50:07.818837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:50:07.818954 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-16 12:50:07.818919756 +0000 UTC m=+17.897308456 I0816 12:50:07.818947 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-16 12:50:07.818933686 +0000 UTC m=+17.897322356 E0816 12:50:07.835545 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0816 12:50:07.835648 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-16 12:50:07.83564035 +0000 UTC m=+17.914029000 E0816 12:50:07.835676 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0816 12:50:07.838561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:50:07.838785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:50:07.838864 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-16 12:50:07.838858073 +0000 UTC m=+17.917246763 E0816 12:50:07.845262 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0816 12:50:07.845638 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 12:50:07.845677 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 12:50:07.845725 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0816 12:50:07.877433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mwdc9" condition "Approved" to 2026-08-16 12:50:07.877421873 +0000 UTC m=+17.955810543 I0816 12:50:07.892626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mwdc9" condition "Ready" to 2026-08-16 12:50:07.892614923 +0000 UTC m=+17.971003593 I0816 12:50:07.913275 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:50:07.9132658 +0000 UTC m=+17.991654490 I0816 12:50:07.928399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:50:07.928634 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:50:07.928630127 +0000 UTC m=+18.007018797 I0816 12:50:07.946654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:50:12.847154 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:50:12.847122053 +0000 UTC m=+22.925510743 I0816 12:50:35.847821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:50:35.847916 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-16 12:50:35.847871773 +0000 UTC m=+45.926260473 I0816 12:50:35.848145 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-16 12:50:35.848126235 +0000 UTC m=+45.926514905 I0816 12:50:35.857214 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-16 12:50:35.857195709 +0000 UTC m=+45.935584359 I0816 12:50:35.869007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:50:35.869069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:50:35.869130 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-16 12:50:35.86912116 +0000 UTC m=+45.947509830 I0816 12:50:36.050216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:50:36.069150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lwn2v" condition "Approved" to 2026-08-16 12:50:36.069136992 +0000 UTC m=+46.147525652 I0816 12:50:36.098297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lwn2v" condition "Ready" to 2026-08-16 12:50:36.098281643 +0000 UTC m=+46.176670313 I0816 12:50:36.130717 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:50:36.130702749 +0000 UTC m=+46.209091419 I0816 12:50:36.156837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:50:36.157222 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:50:36.157210362 +0000 UTC m=+46.235599032 I0816 12:50:36.188053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:50:36.192477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:54:40.613073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:54:40.613149 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-08-16 12:54:40.61312213 +0000 UTC m=+290.691510820 I0816 12:54:40.616121 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-08-16 12:54:40.616111295 +0000 UTC m=+290.694499985 I0816 12:54:40.633273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:54:40.633390 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-08-16 12:54:40.633377838 +0000 UTC m=+290.711766528 I0816 12:54:40.811236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:54:40.841988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-579pj" condition "Approved" to 2026-08-16 12:54:40.841802318 +0000 UTC m=+290.920190988 I0816 12:54:40.878106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-579pj" condition "Ready" to 2026-08-16 12:54:40.878085044 +0000 UTC m=+290.956473734 I0816 12:54:40.903368 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:54:40.903352346 +0000 UTC m=+290.981741016 I0816 12:54:40.926547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:54:41.001800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:55:51.491507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:55:51.491797 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-16 12:55:51.491589218 +0000 UTC m=+361.569977908 I0816 12:55:51.491995 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-16 12:55:51.491047599 +0000 UTC m=+361.569436289 I0816 12:55:51.505929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:55:51.506290 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-16 12:55:51.506282474 +0000 UTC m=+361.584671144 E0816 12:55:51.507356 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0816 12:55:51.507391 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-16 12:55:51.507383903 +0000 UTC m=+361.585772573 E0816 12:55:51.507611 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 12:55:51.526787 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0816 12:55:51.526909 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 12:55:51.526942 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 12:55:51.526984 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0816 12:55:51.530883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:55:51.551833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6tpz6" condition "Approved" to 2026-08-16 12:55:51.551819335 +0000 UTC m=+361.630208005 I0816 12:55:51.563944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6tpz6" condition "Ready" to 2026-08-16 12:55:51.563935961 +0000 UTC m=+361.642324631 I0816 12:55:51.587184 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:55:51.587169307 +0000 UTC m=+361.665557977 I0816 12:55:51.605920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:55:56.528079 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:55:56.528059271 +0000 UTC m=+366.606447971 I0816 12:56:41.265971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:41.266147 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-16 12:56:41.266126035 +0000 UTC m=+411.344514695 I0816 12:56:41.285018 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-16 12:56:41.284999813 +0000 UTC m=+411.363388473 I0816 12:56:41.285690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:41.285911 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-16 12:56:41.285906977 +0000 UTC m=+411.364295637 I0816 12:56:41.289365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:41.289396 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-16 12:56:41.28938881 +0000 UTC m=+411.367777470 I0816 12:56:41.289675 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-16 12:56:41.28966962 +0000 UTC m=+411.368058280 I0816 12:56:41.277271 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-16 12:56:41.277247378 +0000 UTC m=+411.355636038 I0816 12:56:41.324059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.324253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:41.324369 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-16 12:56:41.324361709 +0000 UTC m=+411.402750379 I0816 12:56:41.328965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.330108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:41.331205 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-16 12:56:41.330144949 +0000 UTC m=+411.408533639 I0816 12:56:41.331756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.331799 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:41.331819 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-16 12:56:41.331814162 +0000 UTC m=+411.410202822 I0816 12:56:41.532404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.537450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qbn9d" condition "Approved" to 2026-08-16 12:56:41.537440719 +0000 UTC m=+411.615829379 I0816 12:56:41.570557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qbn9d" condition "Ready" to 2026-08-16 12:56:41.570543678 +0000 UTC m=+411.648932338 I0816 12:56:41.591454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.605533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2rqbx" condition "Approved" to 2026-08-16 12:56:41.605516137 +0000 UTC m=+411.683904787 I0816 12:56:41.625351 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:41.6253325 +0000 UTC m=+411.703721150 I0816 12:56:41.643839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2rqbx" condition "Ready" to 2026-08-16 12:56:41.643819973 +0000 UTC m=+411.722208633 I0816 12:56:41.674175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.677428 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:41.674889924 +0000 UTC m=+411.753278574 I0816 12:56:41.681423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.685995 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:41.685979456 +0000 UTC m=+411.764368116 I0816 12:56:41.701713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.743930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:41.744459 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:41.744449439 +0000 UTC m=+411.822838109 I0816 12:56:41.998092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:42.243930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:42.308022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g4zrg" condition "Approved" to 2026-08-16 12:56:42.308004829 +0000 UTC m=+412.386393489 I0816 12:56:42.432734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g4zrg" condition "Ready" to 2026-08-16 12:56:42.432720856 +0000 UTC m=+412.511109516 I0816 12:56:42.843042 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:42.843021194 +0000 UTC m=+412.921409854 I0816 12:56:42.940461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:42.940778 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:42.940772495 +0000 UTC m=+413.019161155 I0816 12:56:43.194196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:43.239977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:49.326339 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" condition "Ready" to 2026-08-16 12:56:49.326324261 +0000 UTC m=+419.404712921 I0816 12:56:49.326942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:49.327044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" condition "Issuing" to 2026-08-16 12:56:49.326980086 +0000 UTC m=+419.405368756 I0816 12:56:49.345183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:49.345369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:49.345447 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" condition "Issuing" to 2026-08-16 12:56:49.345438115 +0000 UTC m=+419.423826785 I0816 12:56:49.462627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:49.476378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7qdbb-z4kbw" condition "Approved" to 2026-08-16 12:56:49.47636905 +0000 UTC m=+419.554757710 I0816 12:56:49.497190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7qdbb-z4kbw" condition "Ready" to 2026-08-16 12:56:49.497179618 +0000 UTC m=+419.575568288 I0816 12:56:49.525111 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:49.52509391 +0000 UTC m=+419.603482580 I0816 12:56:49.547197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qdbb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:57:01.746765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:57:01.746806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-16 12:57:01.746793496 +0000 UTC m=+431.825182156 I0816 12:57:01.747153 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-16 12:57:01.747131229 +0000 UTC m=+431.825519899 I0816 12:57:01.760611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:57:01.760712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:57:01.760744 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-16 12:57:01.760733669 +0000 UTC m=+431.839122329 I0816 12:57:01.983392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bbqps" condition "Approved" to 2026-08-16 12:57:01.983373616 +0000 UTC m=+432.061762276 I0816 12:57:01.999234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bbqps" condition "Ready" to 2026-08-16 12:57:01.999225383 +0000 UTC m=+432.077614043 I0816 12:57:02.035621 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:57:02.035602288 +0000 UTC m=+432.113990968 I0816 12:57:02.058227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:57:02.121137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:19.202857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:00:19.202946 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-16 13:00:19.202934601 +0000 UTC m=+629.281323271 I0816 13:00:19.202969 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-16 13:00:19.202952242 +0000 UTC m=+629.281340912 I0816 13:00:19.220987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:19.221041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:00:19.221062 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-16 13:00:19.221056569 +0000 UTC m=+629.299445229 I0816 13:00:19.396588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5ztph" condition "Approved" to 2026-08-16 13:00:19.396566352 +0000 UTC m=+629.474955022 I0816 13:00:19.416479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5ztph" condition "Ready" to 2026-08-16 13:00:19.416464816 +0000 UTC m=+629.494853486 I0816 13:00:19.452989 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:00:19.452976173 +0000 UTC m=+629.531364833 I0816 13:00:19.480620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:19.522272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:59.497004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:00:59.497036 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-16 13:00:59.497024695 +0000 UTC m=+669.575413355 I0816 13:00:59.497425 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-16 13:00:59.497420418 +0000 UTC m=+669.575809078 I0816 13:00:59.511227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:59.511290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:00:59.511484 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-16 13:00:59.511302759 +0000 UTC m=+669.589691449 I0816 13:00:59.975297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8mghq" condition "Approved" to 2026-08-16 13:00:59.975285164 +0000 UTC m=+670.053673824 I0816 13:01:00.001719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8mghq" condition "Ready" to 2026-08-16 13:01:00.001709389 +0000 UTC m=+670.080098049 I0816 13:01:00.034569 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:00.034551316 +0000 UTC m=+670.112939976 I0816 13:01:00.065195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:00.065983 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:00.065972364 +0000 UTC m=+670.144361024 I0816 13:01:00.088742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:00.089426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:00.090152 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:00.09013576 +0000 UTC m=+670.168524460