I0812 10:58:32.343329 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0812 10:58:32.343488 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0812 10:58:32.343613 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 10:58:32.347068 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0812 10:58:32.347451 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0812 10:58:32.347447 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0812 10:58:32.347509 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0812 10:58:32.350256 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 10:58:32.363738 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0812 10:58:32.368538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0812 10:58:32.372936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0812 10:58:32.376153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0812 10:58:32.378227 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0812 10:58:32.381046 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0812 10:58:32.381095 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0812 10:58:32.381102 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0812 10:58:32.383126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0812 10:58:32.384857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0812 10:58:32.388569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0812 10:58:32.391324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0812 10:58:32.393913 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0812 10:58:32.393935 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0812 10:58:32.393971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0812 10:58:32.396627 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0812 10:58:32.399075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0812 10:58:32.401134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0812 10:58:32.402879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0812 10:58:32.404641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0812 10:58:32.406562 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0812 10:58:32.410295 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0812 10:58:32.410505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0812 10:58:32.414894 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0812 10:58:32.415134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0812 10:58:32.417681 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.418064 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.418259 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.436672 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.452420 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.463016 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.476659 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.492249 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.508972 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:32.509056 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:58:45.600685 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-12 10:58:45.600659461 +0000 UTC m=+13.294329675 I0812 10:58:46.271408 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-12 10:58:46.271390675 +0000 UTC m=+13.965060879 I0812 10:58:46.271509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 10:58:46.271711 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 10:58:46.271696783 +0000 UTC m=+13.965366987 E0812 10:58:46.284923 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 10:58:46.285058 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-12 10:58:46.285049219 +0000 UTC m=+13.978719403 E0812 10:58:46.285110 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 10:58:46.285923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:58:46.286089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 10:58:46.286177 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 10:58:46.286168926 +0000 UTC m=+13.979839110 E0812 10:58:46.300454 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0812 10:58:46.300538 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 10:58:46.300564 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 10:58:46.300629 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0812 10:58:46.321926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:58:46.325228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qqwzk" condition "Approved" to 2026-08-12 10:58:46.325220124 +0000 UTC m=+14.018890298 I0812 10:58:46.337431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qqwzk" condition "Ready" to 2026-08-12 10:58:46.337420831 +0000 UTC m=+14.031091015 I0812 10:58:46.356034 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:58:46.356023389 +0000 UTC m=+14.049693573 I0812 10:58:46.374910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:58:51.301166 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:58:51.301147906 +0000 UTC m=+18.994818120 I0812 10:59:17.854006 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-12 10:59:17.853937799 +0000 UTC m=+45.547608013 I0812 10:59:17.854438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 10:59:17.854478 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 10:59:17.854470303 +0000 UTC m=+45.548140507 I0812 10:59:17.865857 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-12 10:59:17.865842684 +0000 UTC m=+45.559512888 I0812 10:59:17.888827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:59:17.888936 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-12 10:59:17.888924417 +0000 UTC m=+45.582594631 I0812 10:59:18.423652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:59:18.468654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2p5f9" condition "Approved" to 2026-08-12 10:59:18.46864483 +0000 UTC m=+46.162315004 I0812 10:59:18.502981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2p5f9" condition "Ready" to 2026-08-12 10:59:18.50296545 +0000 UTC m=+46.196635634 I0812 10:59:18.529445 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:59:18.529430624 +0000 UTC m=+46.223100808 I0812 10:59:18.554634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:59:18.555181 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:59:18.555174262 +0000 UTC m=+46.248844436 I0812 10:59:18.618431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:59:18.618872 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:59:18.618862542 +0000 UTC m=+46.312532746 I0812 10:59:18.623352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:04:12.772542 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-82.nip.io-tls" condition "Ready" to 2026-08-12 11:04:12.77251595 +0000 UTC m=+340.466186154 I0812 11:04:12.772985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-82.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:04:12.773013 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-82.nip.io-tls" condition "Issuing" to 2026-08-12 11:04:12.773005839 +0000 UTC m=+340.466676043 I0812 11:04:12.787641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-82.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-82.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:04:12.787690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-82.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:04:12.787706 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-82.nip.io-tls" condition "Issuing" to 2026-08-12 11:04:12.787700839 +0000 UTC m=+340.481371013 I0812 11:04:13.029215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-82.nip.io-tls-llp8r" condition "Approved" to 2026-08-12 11:04:13.029205276 +0000 UTC m=+340.722875450 I0812 11:04:13.053979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-82.nip.io-tls-llp8r" condition "Ready" to 2026-08-12 11:04:13.053968583 +0000 UTC m=+340.747638767 I0812 11:04:13.077901 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-82.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:04:13.077890299 +0000 UTC m=+340.771560483 I0812 11:04:13.094537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-82.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-82.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:04:13.141123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-82.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-82.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:05:16.441803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:05:16.441853 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 11:05:16.441826195 +0000 UTC m=+404.135496369 I0812 11:05:16.441931 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-12 11:05:16.44192 +0000 UTC m=+404.135590204 E0812 11:05:16.453848 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 11:05:16.453894 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-12 11:05:16.453885108 +0000 UTC m=+404.147555292 E0812 11:05:16.453940 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 11:05:16.454483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:05:16.454545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:05:16.454564 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 11:05:16.454560389 +0000 UTC m=+404.148230553 E0812 11:05:16.462371 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0812 11:05:16.462812 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 11:05:16.463270 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 11:05:16.463458 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0812 11:05:16.489864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cr6k5" condition "Approved" to 2026-08-12 11:05:16.489853406 +0000 UTC m=+404.183523590 I0812 11:05:16.501518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cr6k5" condition "Ready" to 2026-08-12 11:05:16.501509121 +0000 UTC m=+404.195179295 I0812 11:05:16.522805 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:05:16.522795194 +0000 UTC m=+404.216465378 I0812 11:05:16.546322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:05:16.546595 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:05:16.546588225 +0000 UTC m=+404.240258409 I0812 11:05:16.556839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:05:16.557175 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:05:16.557166609 +0000 UTC m=+404.250836793 I0812 11:05:21.463264 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:05:21.463242557 +0000 UTC m=+409.156912761 I0812 11:06:01.555645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:01.555747 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 11:06:01.555712825 +0000 UTC m=+449.249382999 I0812 11:06:01.559934 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 11:06:01.559920247 +0000 UTC m=+449.253590421 I0812 11:06:01.560217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:01.561679 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-12 11:06:01.561663545 +0000 UTC m=+449.255333719 I0812 11:06:01.572994 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 11:06:01.572980748 +0000 UTC m=+449.266650922 I0812 11:06:01.573254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 11:06:01.573242391 +0000 UTC m=+449.266912555 I0812 11:06:01.573352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:01.573376 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-12 11:06:01.573372128 +0000 UTC m=+449.267042302 I0812 11:06:01.583666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:01.583732 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 11:06:01.583725091 +0000 UTC m=+449.277395275 I0812 11:06:01.599975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:01.600110 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 11:06:01.60010107 +0000 UTC m=+449.293771254 I0812 11:06:01.612020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:01.612097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:01.612162 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-12 11:06:01.61215506 +0000 UTC m=+449.305825254 I0812 11:06:01.748243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:01.774618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lv5rw" condition "Approved" to 2026-08-12 11:06:01.774608067 +0000 UTC m=+449.468278241 I0812 11:06:01.792268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:01.795161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lv5rw" condition "Ready" to 2026-08-12 11:06:01.795151096 +0000 UTC m=+449.488821280 I0812 11:06:01.820276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:01.830903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rhmwv" condition "Approved" to 2026-08-12 11:06:01.830893324 +0000 UTC m=+449.524563498 I0812 11:06:01.843502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jkvh5" condition "Approved" to 2026-08-12 11:06:01.843492952 +0000 UTC m=+449.537163126 I0812 11:06:01.866163 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:01.866153478 +0000 UTC m=+449.559823652 I0812 11:06:01.871533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rhmwv" condition "Ready" to 2026-08-12 11:06:01.87152472 +0000 UTC m=+449.565194894 I0812 11:06:01.872017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jkvh5" condition "Ready" to 2026-08-12 11:06:01.872004094 +0000 UTC m=+449.565674288 I0812 11:06:02.046524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:02.046854 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:02.046848001 +0000 UTC m=+449.740518175 I0812 11:06:02.449691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:02.550659 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:02.550642901 +0000 UTC m=+450.244313105 I0812 11:06:02.682901 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:02.68288561 +0000 UTC m=+450.376555794 I0812 11:06:02.798980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:02.799401 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:02.799391402 +0000 UTC m=+450.493061616 I0812 11:06:02.902440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:02.906111 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:02.906101937 +0000 UTC m=+450.599772111 I0812 11:06:03.250312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:03.349819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:03.413994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:12.688360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:12.688370 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls" condition "Ready" to 2026-08-12 11:06:12.688352336 +0000 UTC m=+460.382022510 I0812 11:06:12.688392 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls" condition "Issuing" to 2026-08-12 11:06:12.688384998 +0000 UTC m=+460.382055182 I0812 11:06:12.700682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:12.700754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:12.700774 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls" condition "Issuing" to 2026-08-12 11:06:12.700768664 +0000 UTC m=+460.394438848 I0812 11:06:12.891268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p9d5c-wgv4z" condition "Approved" to 2026-08-12 11:06:12.891256075 +0000 UTC m=+460.584926239 I0812 11:06:12.908396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p9d5c-wgv4z" condition "Ready" to 2026-08-12 11:06:12.908386154 +0000 UTC m=+460.602056338 I0812 11:06:12.938449 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:12.938439007 +0000 UTC m=+460.632109181 I0812 11:06:12.956057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p9d5c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:28.696914 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 11:06:28.696883305 +0000 UTC m=+476.390553509 I0812 11:06:28.697293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:28.697502 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 11:06:28.697494107 +0000 UTC m=+476.391164291 I0812 11:06:28.760137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:28.760246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:28.760270 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 11:06:28.760263843 +0000 UTC m=+476.453934027 I0812 11:06:28.990303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d4psn" condition "Approved" to 2026-08-12 11:06:28.990287614 +0000 UTC m=+476.683957798 I0812 11:06:29.008245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d4psn" condition "Ready" to 2026-08-12 11:06:29.008234834 +0000 UTC m=+476.701905018 I0812 11:06:29.041883 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:29.041862356 +0000 UTC m=+476.735532570 I0812 11:06:29.057746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:29.059939 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:29.059927163 +0000 UTC m=+476.753597337 I0812 11:06:29.086131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:29.088395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:09:54.092526 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 11:09:54.092489872 +0000 UTC m=+681.786160076 I0812 11:09:54.094400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:09:54.094422 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 11:09:54.094417476 +0000 UTC m=+681.788087660 I0812 11:09:54.130723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:09:54.130827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:09:54.130852 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 11:09:54.130845015 +0000 UTC m=+681.824515189 I0812 11:09:54.275664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:09:54.286593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xfttk" condition "Approved" to 2026-08-12 11:09:54.286582951 +0000 UTC m=+681.980253135 I0812 11:09:54.304612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xfttk" condition "Ready" to 2026-08-12 11:09:54.304600855 +0000 UTC m=+681.998271039 I0812 11:09:54.337943 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:09:54.337927033 +0000 UTC m=+682.031597207 I0812 11:09:54.356168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:09:54.356641 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:09:54.356634301 +0000 UTC m=+682.050304485 I0812 11:09:54.372777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:09:54.389258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:09:54.390079 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:09:54.39006967 +0000 UTC m=+682.083739854 I0812 11:10:35.406202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:10:35.406280 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-12 11:10:35.406245634 +0000 UTC m=+723.099915818 I0812 11:10:35.406258 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-12 11:10:35.406240424 +0000 UTC m=+723.099910608 I0812 11:10:35.425988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:10:35.426078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:10:35.426100 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-12 11:10:35.426092807 +0000 UTC m=+723.119762981 I0812 11:10:35.656817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-99vtr" condition "Approved" to 2026-08-12 11:10:35.656790515 +0000 UTC m=+723.350460699 I0812 11:10:35.675472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-99vtr" condition "Ready" to 2026-08-12 11:10:35.675460132 +0000 UTC m=+723.369130316 I0812 11:10:35.701537 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:10:35.701523631 +0000 UTC m=+723.395193815 I0812 11:10:35.721730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:10:35.722105 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:10:35.722098214 +0000 UTC m=+723.415768378 I0812 11:10:35.745172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"