I0901 18:23:50.228248 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0901 18:23:50.228419 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0901 18:23:50.228555 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0901 18:23:50.234659 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0901 18:23:50.236033 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0901 18:23:50.236554 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0901 18:23:50.236660 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0901 18:23:50.238288 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0901 18:23:50.257609 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0901 18:23:50.257918 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0901 18:23:50.257971 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0901 18:23:50.257992 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0901 18:23:50.263693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0901 18:23:50.268322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0901 18:23:50.272572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0901 18:23:50.279757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0901 18:23:50.285188 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0901 18:23:50.285227 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0901 18:23:50.285376 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0901 18:23:50.289554 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0901 18:23:50.289655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0901 18:23:50.293926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0901 18:23:50.298304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0901 18:23:50.302462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0901 18:23:50.305038 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0901 18:23:50.307682 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0901 18:23:50.315230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0901 18:23:50.317345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0901 18:23:50.320224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0901 18:23:50.322734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0901 18:23:50.325250 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0901 18:23:50.327994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0901 18:23:50.330979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0901 18:23:50.334652 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.335675 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.336596 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.337229 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.365378 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.389630 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.413974 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.434386 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.436929 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:23:50.458876 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:24:02.478847 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-01 18:24:02.478835839 +0000 UTC m=+12.297652613 I0901 18:24:03.194067 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 18:24:03.19405403 +0000 UTC m=+13.012870804 I0901 18:24:03.194685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:24:03.194780 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-01 18:24:03.194767379 +0000 UTC m=+13.013584183 E0901 18:24:03.216713 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 18:24:03.216800 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-01 18:24:03.216790022 +0000 UTC m=+13.035606826 E0901 18:24:03.216832 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 18:24:03.218373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:24:03.218468 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 18:24:03.218457043 +0000 UTC m=+13.037273857 E0901 18:24:03.227261 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0901 18:24:03.227365 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 18:24:03.227409 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 18:24:03.227459 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0901 18:24:03.244173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:24:03.265174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6jnh7" condition "Approved" to 2026-09-01 18:24:03.265156183 +0000 UTC m=+13.083972987 I0901 18:24:03.281201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6jnh7" condition "Ready" to 2026-09-01 18:24:03.281180508 +0000 UTC m=+13.099997322 I0901 18:24:03.307773 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:24:03.30775717 +0000 UTC m=+13.126573974 I0901 18:24:03.335877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:24:03.336142 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:24:03.336134624 +0000 UTC m=+13.154951408 I0901 18:24:03.353747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:24:03.353918 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:24:03.353912202 +0000 UTC m=+13.172728986 I0901 18:24:08.228115 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:24:08.228098834 +0000 UTC m=+18.046915648 I0901 18:24:30.056943 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-01 18:24:30.056922274 +0000 UTC m=+39.875739088 I0901 18:24:30.057503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:24:30.057550 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-01 18:24:30.057542151 +0000 UTC m=+39.876358935 I0901 18:24:30.079685 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-01 18:24:30.079669178 +0000 UTC m=+39.898485992 I0901 18:24:30.097170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:24:30.097236 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-01 18:24:30.097227069 +0000 UTC m=+39.916043853 I0901 18:24:30.337277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:24:30.382407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tm87h" condition "Approved" to 2026-09-01 18:24:30.382391328 +0000 UTC m=+40.201208112 I0901 18:24:30.410491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tm87h" condition "Ready" to 2026-09-01 18:24:30.410475747 +0000 UTC m=+40.229292551 I0901 18:24:30.450208 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:24:30.450196966 +0000 UTC m=+40.269013750 I0901 18:24:30.489481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:24:30.489904 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:24:30.489895305 +0000 UTC m=+40.308712109 I0901 18:24:30.520631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:29:25.073918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-206.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:29:25.074029 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Issuing" to 2026-09-01 18:29:25.073987762 +0000 UTC m=+334.892804546 I0901 18:29:25.075016 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Ready" to 2026-09-01 18:29:25.075009289 +0000 UTC m=+334.893826073 I0901 18:29:25.095627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:29:25.095690 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Ready" to 2026-09-01 18:29:25.09568338 +0000 UTC m=+334.914500164 I0901 18:29:25.200385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:29:25.240295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-206.nip.io-tls-2bsbx" condition "Approved" to 2026-09-01 18:29:25.240279727 +0000 UTC m=+335.059096511 I0901 18:29:25.280267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-206.nip.io-tls-2bsbx" condition "Ready" to 2026-09-01 18:29:25.280249763 +0000 UTC m=+335.099066577 I0901 18:29:25.328938 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:29:25.328917558 +0000 UTC m=+335.147734362 I0901 18:29:25.360293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:29:25.360896 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:29:25.360885835 +0000 UTC m=+335.179702649 I0901 18:29:25.373968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:29:25.386370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:30:29.325755 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-01 18:30:29.325713572 +0000 UTC m=+399.144530346 I0901 18:30:29.326121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:30:29.326165 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-01 18:30:29.326154782 +0000 UTC m=+399.144971596 E0901 18:30:29.334877 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 18:30:29.335160 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-01 18:30:29.335148803 +0000 UTC m=+399.153965637 E0901 18:30:29.335324 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 18:30:29.343930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:30:29.344024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:30:29.344047 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-01 18:30:29.344038812 +0000 UTC m=+399.162855626 E0901 18:30:29.349336 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0901 18:30:29.349467 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 18:30:29.349542 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 18:30:29.349594 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0901 18:30:29.384102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:30:29.389048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hxk7x" condition "Approved" to 2026-09-01 18:30:29.38903201 +0000 UTC m=+399.207848814 I0901 18:30:29.404431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hxk7x" condition "Ready" to 2026-09-01 18:30:29.404419385 +0000 UTC m=+399.223236189 I0901 18:30:29.429673 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:30:29.429652491 +0000 UTC m=+399.248469305 I0901 18:30:29.442076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:30:34.350641 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:30:34.350627899 +0000 UTC m=+404.169444713 I0901 18:31:14.476335 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-01 18:31:14.476301502 +0000 UTC m=+444.295118276 I0901 18:31:14.479761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:31:14.479806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-01 18:31:14.479799334 +0000 UTC m=+444.298616128 I0901 18:31:14.480104 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-01 18:31:14.48010015 +0000 UTC m=+444.298916934 I0901 18:31:14.480203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:31:14.480217 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-01 18:31:14.480214072 +0000 UTC m=+444.299030856 I0901 18:31:14.502280 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-01 18:31:14.50038452 +0000 UTC m=+444.319201284 I0901 18:31:14.502668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:31:14.502686 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-01 18:31:14.502683017 +0000 UTC m=+444.321499791 I0901 18:31:14.525715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:14.525770 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-01 18:31:14.525763835 +0000 UTC m=+444.344580609 I0901 18:31:14.537724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:14.537787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:31:14.537811 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-01 18:31:14.537806734 +0000 UTC m=+444.356623508 I0901 18:31:14.538330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:14.538413 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-01 18:31:14.538395166 +0000 UTC m=+444.357211930 I0901 18:31:14.685198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:14.694432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:14.711383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-74qnt" condition "Approved" to 2026-09-01 18:31:14.711371354 +0000 UTC m=+444.530188138 I0901 18:31:14.721073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7g8j8" condition "Approved" to 2026-09-01 18:31:14.721059404 +0000 UTC m=+444.539876188 I0901 18:31:14.725958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-74qnt" condition "Ready" to 2026-09-01 18:31:14.725950235 +0000 UTC m=+444.544767009 I0901 18:31:14.736698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7g8j8" condition "Ready" to 2026-09-01 18:31:14.736688877 +0000 UTC m=+444.555505671 I0901 18:31:14.748694 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:31:14.748686545 +0000 UTC m=+444.567503319 I0901 18:31:14.763660 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:31:14.763645325 +0000 UTC m=+444.582462109 I0901 18:31:14.776674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:14.791535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:14.791811 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:31:14.791805667 +0000 UTC m=+444.610622441 I0901 18:31:15.006604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:15.063935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:15.459618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:15.508895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:15.564363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4w5rw" condition "Approved" to 2026-09-01 18:31:15.564349139 +0000 UTC m=+445.383165913 I0901 18:31:15.870324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4w5rw" condition "Ready" to 2026-09-01 18:31:15.870313587 +0000 UTC m=+445.689130371 I0901 18:31:16.113889 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:31:16.113870943 +0000 UTC m=+445.932687747 I0901 18:31:16.207101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:16.207667 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:31:16.207659067 +0000 UTC m=+446.026475881 I0901 18:31:16.465775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:16.510678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:26.609914 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" condition "Ready" to 2026-09-01 18:31:26.609899446 +0000 UTC m=+456.428716230 I0901 18:31:26.610208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:31:26.610240 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" condition "Issuing" to 2026-09-01 18:31:26.610233193 +0000 UTC m=+456.429049967 I0901 18:31:26.627217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jstmr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:26.627335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:31:26.627353 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" condition "Issuing" to 2026-09-01 18:31:26.62734706 +0000 UTC m=+456.446163844 I0901 18:31:27.101160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jstmr-xfhtl" condition "Approved" to 2026-09-01 18:31:27.101143864 +0000 UTC m=+456.919960678 I0901 18:31:27.130966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jstmr-xfhtl" condition "Ready" to 2026-09-01 18:31:27.130952549 +0000 UTC m=+456.949769353 I0901 18:31:27.162647 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:31:27.162632712 +0000 UTC m=+456.981449516 I0901 18:31:27.182002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jstmr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:27.182523 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:31:27.182514705 +0000 UTC m=+457.001331509 I0901 18:31:27.200764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jstmr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jstmr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:39.123801 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-01 18:31:39.123786769 +0000 UTC m=+468.942603563 I0901 18:31:39.123883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:31:39.123922 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-01 18:31:39.123916312 +0000 UTC m=+468.942733086 I0901 18:31:39.145655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:39.145732 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-01 18:31:39.145725417 +0000 UTC m=+468.964542201 I0901 18:31:39.347471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:31:39.419009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k4rn6" condition "Approved" to 2026-09-01 18:31:39.41899784 +0000 UTC m=+469.237814614 I0901 18:31:39.438607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k4rn6" condition "Ready" to 2026-09-01 18:31:39.438598492 +0000 UTC m=+469.257415266 I0901 18:31:39.473193 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:31:39.473165552 +0000 UTC m=+469.291982326 I0901 18:31:39.500985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:57.398586 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-01 18:34:57.398553707 +0000 UTC m=+667.217370521 I0901 18:34:57.398605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:34:57.398895 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-01 18:34:57.398885791 +0000 UTC m=+667.217702595 I0901 18:34:57.421553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:57.421656 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-01 18:34:57.421645288 +0000 UTC m=+667.240462102 I0901 18:34:57.513902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:57.544225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ctzpk" condition "Approved" to 2026-09-01 18:34:57.544195795 +0000 UTC m=+667.363012579 I0901 18:34:57.561111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ctzpk" condition "Ready" to 2026-09-01 18:34:57.5611006 +0000 UTC m=+667.379917384 I0901 18:34:57.592899 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:57.592884754 +0000 UTC m=+667.411701538 I0901 18:34:57.611719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:35:38.494457 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-01 18:35:38.494438698 +0000 UTC m=+708.313255502 I0901 18:35:38.494942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:35:38.495094 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-01 18:35:38.495038992 +0000 UTC m=+708.313855796 I0901 18:35:38.518388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:35:38.518466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:35:38.518490 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-01 18:35:38.518482748 +0000 UTC m=+708.337299562 I0901 18:35:38.665636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:35:38.671395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ts6b7" condition "Approved" to 2026-09-01 18:35:38.671389684 +0000 UTC m=+708.490206448 I0901 18:35:38.694270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ts6b7" condition "Ready" to 2026-09-01 18:35:38.694255787 +0000 UTC m=+708.513072551 I0901 18:35:38.724045 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:35:38.724037532 +0000 UTC m=+708.542854306 I0901 18:35:38.748849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:35:38.749351 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:35:38.749344151 +0000 UTC m=+708.568160935 I0901 18:35:38.770639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"