I0910 11:02:35.380136 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0910 11:02:35.380301 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 11:02:35.380430 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 11:02:35.389318 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 11:02:35.389875 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0910 11:02:35.389882 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 11:02:35.389907 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 11:02:35.392657 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 11:02:35.406416 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 11:02:35.412097 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 11:02:35.415094 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 11:02:35.415128 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 11:02:35.415434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 11:02:35.419521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 11:02:35.424237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 11:02:35.428357 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 11:02:35.432377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 11:02:35.432399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0910 11:02:35.436256 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 11:02:35.436316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 11:02:35.440795 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 11:02:35.445059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 11:02:35.447387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 11:02:35.453826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 11:02:35.457808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 11:02:35.461340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 11:02:35.464963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 11:02:35.468521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 11:02:35.472298 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 11:02:35.476124 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 11:02:35.476284 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 11:02:35.483737 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 11:02:35.485153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 11:02:35.491598 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.492306 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.495131 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.532863 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.548259 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.566812 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.579879 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.596797 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.608876 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:35.610426 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:02:49.131847 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 11:02:49.131833322 +0000 UTC m=+13.803729173 I0910 11:02:49.935373 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:02:49.935355071 +0000 UTC m=+14.607250962 I0910 11:02:49.936881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:02:49.936949 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 11:02:49.936912209 +0000 UTC m=+14.608808090 E0910 11:02:49.954363 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:02:49.954437 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 11:02:49.954430161 +0000 UTC m=+14.626326002 E0910 11:02:49.954463 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:02:49.959096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:02:49.959316 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:02:49.959173287 +0000 UTC m=+14.631069168 E0910 11:02:49.971564 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0910 11:02:49.971767 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:02:49.971870 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:02:49.971945 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0910 11:02:49.978186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:02:49.978244 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:02:49.978238147 +0000 UTC m=+14.650133998 I0910 11:02:49.981273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bn9kn" condition "Approved" to 2026-09-10 11:02:49.981260511 +0000 UTC m=+14.653156392 I0910 11:02:50.001121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bn9kn" condition "Ready" to 2026-09-10 11:02:50.001102704 +0000 UTC m=+14.672998615 I0910 11:02:50.027765 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:02:50.027748553 +0000 UTC m=+14.699644434 I0910 11:02:50.049622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:02:50.050105 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:02:50.05009581 +0000 UTC m=+14.721991701 I0910 11:02:50.075914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:02:54.972636 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:02:54.97256765 +0000 UTC m=+19.644463541 I0910 11:03:18.956119 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 11:03:18.956109833 +0000 UTC m=+43.628005684 I0910 11:03:18.956492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:03:18.956509 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:03:18.956505813 +0000 UTC m=+43.628401664 I0910 11:03:18.973613 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 11:03:18.973604126 +0000 UTC m=+43.645499977 I0910 11:03:18.980999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:03:18.981074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:03:18.981104 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:03:18.981098073 +0000 UTC m=+43.652993924 I0910 11:03:19.338680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sc2hm" condition "Approved" to 2026-09-10 11:03:19.338669735 +0000 UTC m=+44.010565586 I0910 11:03:19.376003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sc2hm" condition "Ready" to 2026-09-10 11:03:19.375992655 +0000 UTC m=+44.047888506 I0910 11:03:19.408163 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:03:19.40815321 +0000 UTC m=+44.080049061 I0910 11:03:19.431242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:10.596221 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-75.nip.io-tls" condition "Ready" to 2026-09-10 11:08:10.596176474 +0000 UTC m=+335.268072355 I0910 11:08:10.597130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-75.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:10.597165 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-75.nip.io-tls" condition "Issuing" to 2026-09-10 11:08:10.597158263 +0000 UTC m=+335.269054154 I0910 11:08:10.619365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:10.619858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-75.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:10.620041 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-75.nip.io-tls" condition "Issuing" to 2026-09-10 11:08:10.620023324 +0000 UTC m=+335.291919225 I0910 11:08:10.792646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-75.nip.io-tls-95hvt" condition "Approved" to 2026-09-10 11:08:10.792060343 +0000 UTC m=+335.463956224 I0910 11:08:10.834030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-75.nip.io-tls-95hvt" condition "Ready" to 2026-09-10 11:08:10.834009946 +0000 UTC m=+335.505905837 I0910 11:08:10.873639 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-75.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:10.873617041 +0000 UTC m=+335.545512932 I0910 11:08:10.899107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:10.899801 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-75.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:10.899790096 +0000 UTC m=+335.571685957 I0910 11:08:10.921551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:20.074751 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:09:20.074786 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 11:09:20.07477123 +0000 UTC m=+404.746667101 I0910 11:09:20.074825 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 11:09:20.074821132 +0000 UTC m=+404.746716983 E0910 11:09:20.094393 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:09:20.094512 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 11:09:20.094500189 +0000 UTC m=+404.766396080 E0910 11:09:20.094688 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:09:20.096816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:20.096929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:09:20.096964 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 11:09:20.096956382 +0000 UTC m=+404.768852243 E0910 11:09:20.106813 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0910 11:09:20.107273 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:09:20.107382 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:09:20.107473 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0910 11:09:20.146019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-krhvt" condition "Approved" to 2026-09-10 11:09:20.145993956 +0000 UTC m=+404.817889847 I0910 11:09:20.161790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-krhvt" condition "Ready" to 2026-09-10 11:09:20.161776162 +0000 UTC m=+404.833672013 I0910 11:09:20.188398 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:20.188382678 +0000 UTC m=+404.860278539 I0910 11:09:20.204850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:20.205098 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:20.205089839 +0000 UTC m=+404.876985690 I0910 11:09:20.221844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:20.232967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:25.107301 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:25.107283278 +0000 UTC m=+409.779179169 I0910 11:10:08.223925 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 11:10:08.223907075 +0000 UTC m=+452.895802926 I0910 11:10:08.224703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:10:08.224790 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 11:10:08.224776365 +0000 UTC m=+452.896672276 I0910 11:10:08.237956 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 11:10:08.237936067 +0000 UTC m=+452.909831938 I0910 11:10:08.238664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:10:08.238704 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:10:08.238694795 +0000 UTC m=+452.910590646 I0910 11:10:08.238844 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 11:10:08.238836169 +0000 UTC m=+452.910732030 I0910 11:10:08.239049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:10:08.239070 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 11:10:08.239066224 +0000 UTC m=+452.910962075 I0910 11:10:08.321730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:08.321806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 11:10:08.321799766 +0000 UTC m=+452.993695617 I0910 11:10:08.348252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:08.348319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:10:08.348349 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:10:08.348343175 +0000 UTC m=+453.020239016 I0910 11:10:08.348615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:08.348640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:10:08.348657 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 11:10:08.348654772 +0000 UTC m=+453.020550623 I0910 11:10:08.614384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fwnxh" condition "Approved" to 2026-09-10 11:10:08.614366514 +0000 UTC m=+453.286262365 I0910 11:10:08.650433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:08.652830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fwnxh" condition "Ready" to 2026-09-10 11:10:08.652818133 +0000 UTC m=+453.324713974 I0910 11:10:08.680623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nxp2f" condition "Approved" to 2026-09-10 11:10:08.680609212 +0000 UTC m=+453.352505063 I0910 11:10:08.692110 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:08.692094773 +0000 UTC m=+453.363990624 I0910 11:10:08.696148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pm8fj" condition "Approved" to 2026-09-10 11:10:08.696124451 +0000 UTC m=+453.368020292 I0910 11:10:08.706595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nxp2f" condition "Ready" to 2026-09-10 11:10:08.706583136 +0000 UTC m=+453.378478987 I0910 11:10:08.716432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pm8fj" condition "Ready" to 2026-09-10 11:10:08.716418717 +0000 UTC m=+453.388314568 I0910 11:10:08.721884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:08.722456 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:08.722445365 +0000 UTC m=+453.394341216 I0910 11:10:09.121002 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:09.120989268 +0000 UTC m=+453.792885109 I0910 11:10:09.221538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:09.272704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:09.322110 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:09.322090517 +0000 UTC m=+453.993986408 I0910 11:10:09.422182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:09.422734 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:09.422722343 +0000 UTC m=+454.094618224 I0910 11:10:09.567627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:09.567959 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:09.567953559 +0000 UTC m=+454.239849410 I0910 11:10:09.971799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:10.021167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:10.076097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:18.016103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:10:18.016152 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" condition "Issuing" to 2026-09-10 11:10:18.016139889 +0000 UTC m=+462.688035760 I0910 11:10:18.016146 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" condition "Ready" to 2026-09-10 11:10:18.016124868 +0000 UTC m=+462.688020729 I0910 11:10:18.033520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:18.033605 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" condition "Ready" to 2026-09-10 11:10:18.033596652 +0000 UTC m=+462.705492503 I0910 11:10:18.226059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:18.267511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gvjzf-m6k56" condition "Approved" to 2026-09-10 11:10:18.267490764 +0000 UTC m=+462.939386655 I0910 11:10:18.293658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gvjzf-m6k56" condition "Ready" to 2026-09-10 11:10:18.293643088 +0000 UTC m=+462.965538969 I0910 11:10:18.341703 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:18.341684171 +0000 UTC m=+463.013580022 I0910 11:10:18.368672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:18.369083 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:18.369073383 +0000 UTC m=+463.040969754 I0910 11:10:18.400188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:18.402414 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvjzf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:18.40240281 +0000 UTC m=+463.074298661 I0910 11:10:31.163213 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 11:10:31.163194723 +0000 UTC m=+475.835090574 I0910 11:10:31.163480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:10:31.163533 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 11:10:31.163521661 +0000 UTC m=+475.835417512 I0910 11:10:31.186753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:31.187064 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 11:10:31.187032214 +0000 UTC m=+475.858928275 I0910 11:10:31.459199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:31.493825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n4g7l" condition "Approved" to 2026-09-10 11:10:31.493809941 +0000 UTC m=+476.165705802 I0910 11:10:31.514658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n4g7l" condition "Ready" to 2026-09-10 11:10:31.51464648 +0000 UTC m=+476.186542331 I0910 11:10:31.545802 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:31.545742014 +0000 UTC m=+476.217637865 I0910 11:10:31.570266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:13:51.621326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:13:51.621394 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 11:13:51.621386722 +0000 UTC m=+676.293282583 I0910 11:13:51.621447 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:13:51.621430544 +0000 UTC m=+676.293326415 I0910 11:13:51.643743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:13:51.643857 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:13:51.643849777 +0000 UTC m=+676.315745648 I0910 11:13:51.890804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:13:51.933578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pz6qr" condition "Approved" to 2026-09-10 11:13:51.933563204 +0000 UTC m=+676.605459045 I0910 11:13:51.957741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pz6qr" condition "Ready" to 2026-09-10 11:13:51.957728636 +0000 UTC m=+676.629624487 I0910 11:13:51.993332 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:13:51.993315249 +0000 UTC m=+676.665211100 I0910 11:13:52.020093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:13:52.080521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:35.647757 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-10 11:14:35.647737568 +0000 UTC m=+720.319633449 I0910 11:14:35.648169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:14:35.648460 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-10 11:14:35.648438084 +0000 UTC m=+720.320333975 I0910 11:14:35.675803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:35.676447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:14:35.676626 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-10 11:14:35.676608977 +0000 UTC m=+720.348504878 I0910 11:14:35.969793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5xh4x" condition "Approved" to 2026-09-10 11:14:35.969775816 +0000 UTC m=+720.641671697 I0910 11:14:36.006995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5xh4x" condition "Ready" to 2026-09-10 11:14:36.006979215 +0000 UTC m=+720.678875096 I0910 11:14:36.035162 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:36.035145666 +0000 UTC m=+720.707041517 I0910 11:14:36.059797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:36.060282 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:36.06027498 +0000 UTC m=+720.732170831 I0910 11:14:36.077133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:36.077635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:36.077674 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:36.077663448 +0000 UTC m=+720.749559299