I0819 09:02:58.210227 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0819 09:02:58.210469 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0819 09:02:58.210575 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0819 09:02:58.213999 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0819 09:02:58.215343 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0819 09:02:58.215769 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0819 09:02:58.215936 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0819 09:02:58.220460 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0819 09:02:58.237742 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0819 09:02:58.237935 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0819 09:02:58.237979 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0819 09:02:58.238005 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0819 09:02:58.241747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0819 09:02:58.244603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0819 09:02:58.247117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0819 09:02:58.252285 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0819 09:02:58.257791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0819 09:02:58.260146 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0819 09:02:58.260284 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0819 09:02:58.262107 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0819 09:02:58.264559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0819 09:02:58.269345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0819 09:02:58.272447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0819 09:02:58.277668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0819 09:02:58.280081 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0819 09:02:58.282475 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0819 09:02:58.284739 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0819 09:02:58.287272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0819 09:02:58.289530 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0819 09:02:58.289559 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0819 09:02:58.289763 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0819 09:02:58.292112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0819 09:02:58.295166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0819 09:02:58.305152 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.305829 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.306224 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.306650 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.314554 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.330151 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.349132 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.364162 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.382860 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:02:58.395518 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:10.109112 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-19 09:03:10.109097844 +0000 UTC m=+11.928555386 I0819 09:03:10.822645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:03:10.822732 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-19 09:03:10.822723318 +0000 UTC m=+12.642180860 I0819 09:03:10.822777 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-19 09:03:10.822747538 +0000 UTC m=+12.642205060 I0819 09:03:10.836709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:10.836752 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-19 09:03:10.836748257 +0000 UTC m=+12.656205769 E0819 09:03:10.839977 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:03:10.840051 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-19 09:03:10.840044979 +0000 UTC m=+12.659502501 E0819 09:03:10.840073 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:03:10.853089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0819 09:03:10.866209 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0819 09:03:10.866538 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:03:10.866671 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:03:10.866720 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0819 09:03:10.880596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nmxj8" condition "Approved" to 2026-08-19 09:03:10.88058516 +0000 UTC m=+12.700042682 I0819 09:03:10.891416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nmxj8" condition "Ready" to 2026-08-19 09:03:10.891404231 +0000 UTC m=+12.710861763 I0819 09:03:10.914000 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:10.913986597 +0000 UTC m=+12.733444149 I0819 09:03:10.933746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:10.934228 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:10.934218896 +0000 UTC m=+12.753676438 I0819 09:03:10.950577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:10.950953 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:10.950945936 +0000 UTC m=+12.770403458 I0819 09:03:10.952578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:15.866982 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:15.86690031 +0000 UTC m=+17.686357872 I0819 09:03:40.392834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:03:40.392877 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-19 09:03:40.392868166 +0000 UTC m=+42.212325698 I0819 09:03:40.393143 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-19 09:03:40.393128078 +0000 UTC m=+42.212585600 I0819 09:03:40.428248 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-19 09:03:40.428237989 +0000 UTC m=+42.247695511 I0819 09:03:40.430811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:40.430928 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:03:40.430950 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-19 09:03:40.43094529 +0000 UTC m=+42.250402802 I0819 09:03:40.831142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-px7wx" condition "Approved" to 2026-08-19 09:03:40.831127635 +0000 UTC m=+42.650585187 I0819 09:03:40.866152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-px7wx" condition "Ready" to 2026-08-19 09:03:40.866140748 +0000 UTC m=+42.685598270 I0819 09:03:40.894013 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:40.893995444 +0000 UTC m=+42.713452986 I0819 09:03:40.916181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:49.936827 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready" to 2026-08-19 09:08:49.936792092 +0000 UTC m=+351.756249634 I0819 09:08:49.937075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:08:49.937175 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Issuing" to 2026-08-19 09:08:49.937166033 +0000 UTC m=+351.756623575 I0819 09:08:49.952136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:49.952251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:08:49.952293 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Issuing" to 2026-08-19 09:08:49.952265223 +0000 UTC m=+351.771722745 I0819 09:08:50.191787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-8xc74" condition "Approved" to 2026-08-19 09:08:50.19177562 +0000 UTC m=+352.011233162 I0819 09:08:50.218228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-8xc74" condition "Ready" to 2026-08-19 09:08:50.218216151 +0000 UTC m=+352.037673703 I0819 09:08:50.250639 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:08:50.250622824 +0000 UTC m=+352.070080346 I0819 09:08:50.280149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:50.280494 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:08:50.280487595 +0000 UTC m=+352.099945117 I0819 09:08:50.299217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:50.299465 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:08:50.299458838 +0000 UTC m=+352.118916360 I0819 09:09:55.109865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:55.109910 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-19 09:09:55.109899806 +0000 UTC m=+416.929357348 I0819 09:09:55.110275 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-19 09:09:55.110254448 +0000 UTC m=+416.929711990 E0819 09:09:55.130606 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:09:55.130644 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-19 09:09:55.130635486 +0000 UTC m=+416.950093008 E0819 09:09:55.130693 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:09:55.132367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:55.132441 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-19 09:09:55.132434844 +0000 UTC m=+416.951892386 E0819 09:09:55.159488 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0819 09:09:55.159630 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:09:55.159686 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:09:55.159748 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0819 09:09:55.167185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:55.284717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2xgn6" condition "Approved" to 2026-08-19 09:09:55.284701224 +0000 UTC m=+417.104158776 I0819 09:09:55.299513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2xgn6" condition "Ready" to 2026-08-19 09:09:55.299501019 +0000 UTC m=+417.118958551 I0819 09:09:55.374273 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:55.374256149 +0000 UTC m=+417.193713691 I0819 09:09:55.394747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:55.395109 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:55.395101142 +0000 UTC m=+417.214558684 I0819 09:09:55.403411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:55.422975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:00.160082 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:00.160040018 +0000 UTC m=+421.979497530 I0819 09:10:46.215848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:10:46.215917 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-19 09:10:46.215909775 +0000 UTC m=+468.035367287 I0819 09:10:46.216783 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-19 09:10:46.216768054 +0000 UTC m=+468.036225566 I0819 09:10:46.229262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:10:46.229302 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-19 09:10:46.22929549 +0000 UTC m=+468.048752992 I0819 09:10:46.229523 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-19 09:10:46.229519638 +0000 UTC m=+468.048977150 I0819 09:10:46.251626 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-19 09:10:46.251615332 +0000 UTC m=+468.071072844 I0819 09:10:46.251910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:10:46.251949 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-19 09:10:46.251945973 +0000 UTC m=+468.071403485 I0819 09:10:46.430079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:46.430367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:46.432021 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-19 09:10:46.432005565 +0000 UTC m=+468.251463077 I0819 09:10:46.435908 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-19 09:10:46.435892375 +0000 UTC m=+468.255349887 I0819 09:10:46.437005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:46.437048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:10:46.437066 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-19 09:10:46.437061244 +0000 UTC m=+468.256518756 I0819 09:10:46.578093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:46.655879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nx56m" condition "Approved" to 2026-08-19 09:10:46.655864934 +0000 UTC m=+468.475322446 I0819 09:10:46.666577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hpnp5" condition "Approved" to 2026-08-19 09:10:46.66656434 +0000 UTC m=+468.486021862 I0819 09:10:46.677755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nx56m" condition "Ready" to 2026-08-19 09:10:46.677743921 +0000 UTC m=+468.497201443 I0819 09:10:46.685953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hpnp5" condition "Ready" to 2026-08-19 09:10:46.685940343 +0000 UTC m=+468.505397885 I0819 09:10:46.710028 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:46.710015514 +0000 UTC m=+468.529473036 I0819 09:10:46.719332 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:46.719319083 +0000 UTC m=+468.538776605 I0819 09:10:46.719552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:46.732649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:46.733053 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:46.733046879 +0000 UTC m=+468.552504391 I0819 09:10:46.741772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:46.742168 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:46.742156221 +0000 UTC m=+468.561613753 I0819 09:10:46.859090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:46.962213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:47.013254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zx88n" condition "Approved" to 2026-08-19 09:10:47.013244819 +0000 UTC m=+468.832702331 I0819 09:10:47.106185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:47.263441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zx88n" condition "Ready" to 2026-08-19 09:10:47.263425384 +0000 UTC m=+469.082882896 I0819 09:10:47.874156 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:47.874137961 +0000 UTC m=+469.693595513 I0819 09:10:47.902223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:47.902514 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:47.902508604 +0000 UTC m=+469.721966116 I0819 09:10:48.057285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:58.519492 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-525j8-tls" condition "Ready" to 2026-08-19 09:10:58.519469673 +0000 UTC m=+480.338927195 I0819 09:10:58.519542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-525j8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:10:58.519573 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-525j8-tls" condition "Issuing" to 2026-08-19 09:10:58.519565706 +0000 UTC m=+480.339023228 I0819 09:10:58.536672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-525j8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-525j8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:58.536809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-525j8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:10:58.536865 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-525j8-tls" condition "Issuing" to 2026-08-19 09:10:58.536853552 +0000 UTC m=+480.356311104 I0819 09:10:58.668757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-525j8-wjp9d" condition "Approved" to 2026-08-19 09:10:58.668745047 +0000 UTC m=+480.488202569 I0819 09:10:58.686436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-525j8-wjp9d" condition "Ready" to 2026-08-19 09:10:58.686425446 +0000 UTC m=+480.505882958 I0819 09:10:58.730151 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-525j8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:58.730140171 +0000 UTC m=+480.549597683 I0819 09:10:58.753763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-525j8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-525j8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:58.754178 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-525j8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:58.754169092 +0000 UTC m=+480.573626604 I0819 09:10:58.772103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-525j8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-525j8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:58.772335 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-525j8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:58.772327887 +0000 UTC m=+480.591785409 I0819 09:11:26.797357 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-19 09:11:26.797320315 +0000 UTC m=+508.616777867 I0819 09:11:26.797621 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:11:26.797685 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-19 09:11:26.797670488 +0000 UTC m=+508.617128040 I0819 09:11:26.855888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:11:26.856032 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:11:26.856060 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-19 09:11:26.856050841 +0000 UTC m=+508.675508383 I0819 09:11:27.282183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vgbjg" condition "Approved" to 2026-08-19 09:11:27.2821692 +0000 UTC m=+509.101626712 I0819 09:11:27.669148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vgbjg" condition "Ready" to 2026-08-19 09:11:27.669131617 +0000 UTC m=+509.488589169 I0819 09:11:27.797308 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:11:27.797292688 +0000 UTC m=+509.616750210 I0819 09:11:27.937220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:11:28.410859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:43.086018 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-19 09:14:43.085985456 +0000 UTC m=+704.905442998 I0819 09:14:43.086649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:43.088581 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-19 09:14:43.088570295 +0000 UTC m=+704.908027857 I0819 09:14:43.101792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:43.101884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:43.101910 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-19 09:14:43.101903296 +0000 UTC m=+704.921360818 I0819 09:14:43.406295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qpphz" condition "Approved" to 2026-08-19 09:14:43.406283698 +0000 UTC m=+705.225741210 I0819 09:14:43.426023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qpphz" condition "Ready" to 2026-08-19 09:14:43.426013351 +0000 UTC m=+705.245470873 I0819 09:14:43.466316 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:43.466303272 +0000 UTC m=+705.285760784 I0819 09:14:43.486904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:43.487631 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:43.487625755 +0000 UTC m=+705.307083267 I0819 09:14:43.496442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:43.503775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:22.464283 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-19 09:15:22.464259598 +0000 UTC m=+744.283717130 I0819 09:15:22.464669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:15:22.464718 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-19 09:15:22.464714018 +0000 UTC m=+744.284171540 I0819 09:15:22.481324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:22.481403 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:15:22.481435 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-19 09:15:22.481424823 +0000 UTC m=+744.300882345 I0819 09:15:22.772302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:22.792877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-46tfc" condition "Approved" to 2026-08-19 09:15:22.792865351 +0000 UTC m=+744.612322873 I0819 09:15:22.821785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-46tfc" condition "Ready" to 2026-08-19 09:15:22.821773107 +0000 UTC m=+744.641230619 I0819 09:15:22.883714 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:15:22.883696895 +0000 UTC m=+744.703154437 I0819 09:15:22.927265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:22.927774 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:15:22.927763875 +0000 UTC m=+744.747221417 I0819 09:15:22.971090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"