I0910 11:00:59.457098 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0910 11:00:59.457216 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 11:00:59.457315 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 11:00:59.462181 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 11:00:59.462599 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 11:00:59.462667 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 11:00:59.462671 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0910 11:00:59.466603 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 11:00:59.478611 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 11:00:59.485342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 11:00:59.491344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 11:00:59.495321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 11:00:59.499205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 11:00:59.503576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0910 11:00:59.508676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 11:00:59.512953 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 11:00:59.512997 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 11:00:59.513004 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 11:00:59.513015 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 11:00:59.513845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 11:00:59.517990 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 11:00:59.518060 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 11:00:59.522021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 11:00:59.525707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 11:00:59.529637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 11:00:59.533439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 11:00:59.537693 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 11:00:59.537791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 11:00:59.542838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 11:00:59.549928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 11:00:59.557049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 11:00:59.560439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 11:00:59.564484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 11:00:59.566664 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.568088 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.568513 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.599114 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.614626 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.629308 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.641565 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.653209 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.665335 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:00:59.687689 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:01:11.374958 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 11:01:11.374945312 +0000 UTC m=+11.954400369 I0910 11:01:12.108964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:01:12.109040 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 11:01:12.109034368 +0000 UTC m=+12.688489425 I0910 11:01:12.109053 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:01:12.109036038 +0000 UTC m=+12.688491125 E0910 11:01:12.126191 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:01:12.126256 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 11:01:12.126250434 +0000 UTC m=+12.705705491 E0910 11:01:12.126304 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:01:12.128272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:01:12.128364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:01:12.128464 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 11:01:12.128388234 +0000 UTC m=+12.707843331 E0910 11:01:12.145105 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0910 11:01:12.145199 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:01:12.145236 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:01:12.145277 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0910 11:01:12.176691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:01:12.179244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tf7r2" condition "Approved" to 2026-09-10 11:01:12.179235596 +0000 UTC m=+12.758690663 I0910 11:01:12.193174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tf7r2" condition "Ready" to 2026-09-10 11:01:12.193165796 +0000 UTC m=+12.772620863 I0910 11:01:12.216864 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:01:12.216854521 +0000 UTC m=+12.796309588 I0910 11:01:12.237099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:01:12.237585 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:01:12.237575631 +0000 UTC m=+12.817030718 I0910 11:01:12.249705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:01:12.249928 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:01:12.249918709 +0000 UTC m=+12.829373776 I0910 11:01:17.145406 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:01:17.145396032 +0000 UTC m=+17.724851099 I0910 11:01:40.152013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:01:40.152046 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:01:40.152039146 +0000 UTC m=+40.731494203 I0910 11:01:40.152123 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 11:01:40.152107438 +0000 UTC m=+40.731562525 I0910 11:01:40.177676 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 11:01:40.177664289 +0000 UTC m=+40.757119346 I0910 11:01:40.180729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:01:40.180798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:01:40.181151 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:01:40.181079601 +0000 UTC m=+40.760534668 I0910 11:01:40.389511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qkk8v" condition "Approved" to 2026-09-10 11:01:40.38950027 +0000 UTC m=+40.968955317 I0910 11:01:40.426787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qkk8v" condition "Ready" to 2026-09-10 11:01:40.426775274 +0000 UTC m=+41.006230351 I0910 11:01:40.458738 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:01:40.458723785 +0000 UTC m=+41.038178842 I0910 11:01:40.487328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:01:40.539445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:06:17.833711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-32.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:06:17.833797 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-32.nip.io-tls" condition "Issuing" to 2026-09-10 11:06:17.833789969 +0000 UTC m=+318.413245046 I0910 11:06:17.834567 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-32.nip.io-tls" condition "Ready" to 2026-09-10 11:06:17.8334998 +0000 UTC m=+318.412954867 I0910 11:06:17.857095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-32.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-32.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:06:17.857163 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-32.nip.io-tls" condition "Ready" to 2026-09-10 11:06:17.857156969 +0000 UTC m=+318.436612026 I0910 11:06:18.030618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-32.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-32.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:06:18.057467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-32.nip.io-tls-wlwvh" condition "Approved" to 2026-09-10 11:06:18.057457101 +0000 UTC m=+318.636912158 I0910 11:06:18.081452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-32.nip.io-tls-wlwvh" condition "Ready" to 2026-09-10 11:06:18.08143535 +0000 UTC m=+318.660890437 I0910 11:06:18.110578 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-32.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:06:18.110564276 +0000 UTC m=+318.690019373 I0910 11:06:18.131585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-32.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-32.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:06:18.131960 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-32.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:06:18.131953851 +0000 UTC m=+318.711408908 I0910 11:06:18.144061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-32.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-32.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:06:18.157366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-32.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-32.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:24.439228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:07:24.439278 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 11:07:24.43926538 +0000 UTC m=+385.018720467 I0910 11:07:24.439295 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 11:07:24.43928421 +0000 UTC m=+385.018739307 E0910 11:07:24.455230 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:07:24.455269 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 11:07:24.455261547 +0000 UTC m=+385.034716604 E0910 11:07:24.455313 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:07:24.459119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:24.459189 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 11:07:24.459179446 +0000 UTC m=+385.038634513 E0910 11:07:24.472207 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0910 11:07:24.472616 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:07:24.472829 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:07:24.473034 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0910 11:07:24.480699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:24.505668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9jxc5" condition "Approved" to 2026-09-10 11:07:24.505654962 +0000 UTC m=+385.085110049 I0910 11:07:24.524158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9jxc5" condition "Ready" to 2026-09-10 11:07:24.524147175 +0000 UTC m=+385.103602232 I0910 11:07:24.546209 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:07:24.546197818 +0000 UTC m=+385.125652885 I0910 11:07:24.564529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:24.564727 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:07:24.564720302 +0000 UTC m=+385.144175369 I0910 11:07:24.577821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:29.473559 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:07:29.47354948 +0000 UTC m=+390.053004537 I0910 11:08:09.103195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:09.103229 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 11:08:09.10322365 +0000 UTC m=+429.682678707 I0910 11:08:09.103492 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 11:08:09.103487838 +0000 UTC m=+429.682942905 I0910 11:08:09.104991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:09.105008 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 11:08:09.105005033 +0000 UTC m=+429.684460100 I0910 11:08:09.105251 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 11:08:09.1052451 +0000 UTC m=+429.684700167 I0910 11:08:09.120631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:09.120670 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:08:09.120651375 +0000 UTC m=+429.700106432 I0910 11:08:09.120974 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 11:08:09.120970395 +0000 UTC m=+429.700425442 I0910 11:08:09.142055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:09.142122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:09.142516 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 11:08:09.142250165 +0000 UTC m=+429.721705242 I0910 11:08:09.149038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:09.149074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:09.149087 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 11:08:09.149082457 +0000 UTC m=+429.728537504 I0910 11:08:09.153229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:09.153265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:09.153278 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:08:09.153274481 +0000 UTC m=+429.732729528 I0910 11:08:09.301415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vfv6h" condition "Approved" to 2026-09-10 11:08:09.301404594 +0000 UTC m=+429.880859661 I0910 11:08:09.304474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:09.308296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kph6z" condition "Approved" to 2026-09-10 11:08:09.308287067 +0000 UTC m=+429.887742124 I0910 11:08:09.321580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vfv6h" condition "Ready" to 2026-09-10 11:08:09.321570711 +0000 UTC m=+429.901025768 I0910 11:08:09.326939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kph6z" condition "Ready" to 2026-09-10 11:08:09.32693097 +0000 UTC m=+429.906386027 I0910 11:08:09.350563 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:09.350554138 +0000 UTC m=+429.930009195 I0910 11:08:09.358649 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:09.358641057 +0000 UTC m=+429.938096114 I0910 11:08:09.372982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:09.381816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:09.829037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:09.992730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xr7x8" condition "Approved" to 2026-09-10 11:08:09.992704698 +0000 UTC m=+430.572159765 I0910 11:08:10.046565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xr7x8" condition "Ready" to 2026-09-10 11:08:10.046552931 +0000 UTC m=+430.626008008 I0910 11:08:10.536672 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:10.536654464 +0000 UTC m=+431.116109561 I0910 11:08:10.632662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:10.633400 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:10.633390365 +0000 UTC m=+431.212845452 I0910 11:08:10.887573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:10.933957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:17.632321 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:17.632352 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" condition "Issuing" to 2026-09-10 11:08:17.632344425 +0000 UTC m=+438.211799492 I0910 11:08:17.632327 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" condition "Ready" to 2026-09-10 11:08:17.632311524 +0000 UTC m=+438.211766591 I0910 11:08:17.652328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:17.652552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:17.652642 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" condition "Issuing" to 2026-09-10 11:08:17.65257246 +0000 UTC m=+438.232027517 I0910 11:08:17.914122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:17.922728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xr5pv-ffmds" condition "Approved" to 2026-09-10 11:08:17.922715269 +0000 UTC m=+438.502170326 I0910 11:08:17.941871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xr5pv-ffmds" condition "Ready" to 2026-09-10 11:08:17.941860223 +0000 UTC m=+438.521315280 I0910 11:08:17.976834 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:17.976822153 +0000 UTC m=+438.556277210 I0910 11:08:17.998586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xr5pv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:29.900907 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 11:08:29.900265484 +0000 UTC m=+450.479720541 I0910 11:08:29.901079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:29.901136 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 11:08:29.90112714 +0000 UTC m=+450.480582207 I0910 11:08:29.915969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:29.916086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:29.916112 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 11:08:29.916106529 +0000 UTC m=+450.495561586 I0910 11:08:30.076252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:30.085802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mfwss" condition "Approved" to 2026-09-10 11:08:30.085789507 +0000 UTC m=+450.665244564 I0910 11:08:30.104261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mfwss" condition "Ready" to 2026-09-10 11:08:30.104251247 +0000 UTC m=+450.683706334 I0910 11:08:30.130090 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:30.130078684 +0000 UTC m=+450.709533731 I0910 11:08:30.150328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:30.150655 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:30.150647585 +0000 UTC m=+450.730102642 I0910 11:08:30.169235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:30.169440 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:30.169433786 +0000 UTC m=+450.748888843 I0910 11:11:42.953952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:11:42.953986 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 11:11:42.953980162 +0000 UTC m=+643.533435219 I0910 11:11:42.954307 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:11:42.95427518 +0000 UTC m=+643.533730267 I0910 11:11:42.972198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:42.972455 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:11:42.972442827 +0000 UTC m=+643.551897934 I0910 11:11:43.114147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:43.143789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dfwt7" condition "Approved" to 2026-09-10 11:11:43.143778976 +0000 UTC m=+643.723234033 I0910 11:11:43.168189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dfwt7" condition "Ready" to 2026-09-10 11:11:43.168175107 +0000 UTC m=+643.747630154 I0910 11:11:43.200793 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:43.200778946 +0000 UTC m=+643.780234003 I0910 11:11:43.219534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:43.219833 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:43.219826337 +0000 UTC m=+643.799281404 I0910 11:11:43.234925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:43.235164 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:43.235157224 +0000 UTC m=+643.814612271 I0910 11:12:24.691068 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-10 11:12:24.691037045 +0000 UTC m=+685.270492112 I0910 11:12:24.691601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:12:24.691643 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-10 11:12:24.691640612 +0000 UTC m=+685.271095679 I0910 11:12:24.718559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:12:24.718623 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-10 11:12:24.718616571 +0000 UTC m=+685.298071618 I0910 11:12:24.867115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:12:24.921485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-45p6c" condition "Approved" to 2026-09-10 11:12:24.921467068 +0000 UTC m=+685.500922125 I0910 11:12:24.946236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-45p6c" condition "Ready" to 2026-09-10 11:12:24.946220486 +0000 UTC m=+685.525675543 I0910 11:12:24.987646 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:12:24.987631236 +0000 UTC m=+685.567086303 I0910 11:12:25.006714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:12:25.007096 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:12:25.007087997 +0000 UTC m=+685.586543064 I0910 11:12:25.035429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"