I0911 05:20:18.273940 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0911 05:20:18.274067 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0911 05:20:18.274158 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0911 05:20:18.282309 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0911 05:20:18.282989 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0911 05:20:18.283134 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0911 05:20:18.283187 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0911 05:20:18.287118 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0911 05:20:18.304120 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0911 05:20:18.309796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0911 05:20:18.313638 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0911 05:20:18.313695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0911 05:20:18.320641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0911 05:20:18.325519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0911 05:20:18.328316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0911 05:20:18.330850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0911 05:20:18.333906 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0911 05:20:18.336503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0911 05:20:18.338846 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0911 05:20:18.338912 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0911 05:20:18.338875 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0911 05:20:18.343306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0911 05:20:18.350359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0911 05:20:18.353979 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0911 05:20:18.354160 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0911 05:20:18.357874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0911 05:20:18.361929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0911 05:20:18.366009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0911 05:20:18.370085 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0911 05:20:18.370144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0911 05:20:18.374345 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0911 05:20:18.374381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0911 05:20:18.379102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0911 05:20:18.383558 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.383959 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.384056 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.386037 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.412486 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.443663 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.462901 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.482988 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.504211 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:18.510858 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0911 05:20:35.072593 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-11 05:20:35.072540907 +0000 UTC m=+16.834695621 I0911 05:20:35.859377 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-11 05:20:35.859364397 +0000 UTC m=+17.621519091 I0911 05:20:35.860573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:20:35.860602 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-11 05:20:35.860596251 +0000 UTC m=+17.622750935 E0911 05:20:35.876780 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0911 05:20:35.877359 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-11 05:20:35.877347618 +0000 UTC m=+17.639502332 E0911 05:20:35.878033 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0911 05:20:35.884276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:20:35.884371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:20:35.884413 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-11 05:20:35.884405951 +0000 UTC m=+17.646560625 E0911 05:20:35.896308 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0911 05:20:35.896641 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0911 05:20:35.896847 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0911 05:20:35.897023 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0911 05:20:35.951870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:20:35.958859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xwd4r" condition "Approved" to 2026-09-11 05:20:35.958842131 +0000 UTC m=+17.720996835 I0911 05:20:35.977522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xwd4r" condition "Ready" to 2026-09-11 05:20:35.977506354 +0000 UTC m=+17.739661078 I0911 05:20:36.006721 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:20:36.006708877 +0000 UTC m=+17.768863561 I0911 05:20:36.026359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:20:40.897246 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:20:40.897216142 +0000 UTC m=+22.659370826 I0911 05:21:02.422398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:21:02.422509 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-11 05:21:02.422500937 +0000 UTC m=+44.184655621 I0911 05:21:02.423626 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-11 05:21:02.423600885 +0000 UTC m=+44.185755649 I0911 05:21:02.456936 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-11 05:21:02.456887892 +0000 UTC m=+44.219042596 I0911 05:21:02.461205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:21:02.461383 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-11 05:21:02.461336342 +0000 UTC m=+44.223491026 I0911 05:21:02.886858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:21:02.917550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tn92q" condition "Approved" to 2026-09-11 05:21:02.917543308 +0000 UTC m=+44.679697992 I0911 05:21:02.949885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tn92q" condition "Ready" to 2026-09-11 05:21:02.949876941 +0000 UTC m=+44.712031625 I0911 05:21:02.994257 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:21:02.994243444 +0000 UTC m=+44.756398128 I0911 05:21:03.024834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:21:03.025160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:21:03.025560 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:21:03.025550308 +0000 UTC m=+44.787705012 I0911 05:21:03.050810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:21:03.051153 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:21:03.051143231 +0000 UTC m=+44.813297915 I0911 05:26:21.450696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-106.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:26:21.450698 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-106.nip.io-tls" condition "Ready" to 2026-09-11 05:26:21.450641604 +0000 UTC m=+363.212796308 I0911 05:26:21.450732 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-106.nip.io-tls" condition "Issuing" to 2026-09-11 05:26:21.450726046 +0000 UTC m=+363.212880730 I0911 05:26:21.469144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-106.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-106.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:26:21.469235 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-106.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:26:21.469264 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-106.nip.io-tls" condition "Issuing" to 2026-09-11 05:26:21.469255111 +0000 UTC m=+363.231409825 I0911 05:26:21.668369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-106.nip.io-tls-r279x" condition "Approved" to 2026-09-11 05:26:21.668354416 +0000 UTC m=+363.430509120 I0911 05:26:21.704326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-106.nip.io-tls-r279x" condition "Ready" to 2026-09-11 05:26:21.704310261 +0000 UTC m=+363.466464965 I0911 05:26:21.732545 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-106.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:26:21.732531122 +0000 UTC m=+363.494685806 I0911 05:26:21.764828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-106.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-106.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:26:21.765665 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-106.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:26:21.765654463 +0000 UTC m=+363.527809167 I0911 05:26:21.771913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-106.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-106.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:26:21.785560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-106.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-106.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:26:21.786187 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-106.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:26:21.786103631 +0000 UTC m=+363.548258345 I0911 05:27:31.048971 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-11 05:27:31.048951025 +0000 UTC m=+432.811105729 I0911 05:27:31.049351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:27:31.049387 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-11 05:27:31.049377364 +0000 UTC m=+432.811532078 E0911 05:27:31.068156 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0911 05:27:31.068252 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-11 05:27:31.068242842 +0000 UTC m=+432.830397546 E0911 05:27:31.068283 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0911 05:27:31.071155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:27:31.071268 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-11 05:27:31.071216429 +0000 UTC m=+432.833371133 E0911 05:27:31.089221 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0911 05:27:31.089435 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0911 05:27:31.089539 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0911 05:27:31.089708 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0911 05:27:31.100714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:27:31.126659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jbql9" condition "Approved" to 2026-09-11 05:27:31.126644354 +0000 UTC m=+432.888799058 I0911 05:27:31.141011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jbql9" condition "Ready" to 2026-09-11 05:27:31.140999337 +0000 UTC m=+432.903154051 I0911 05:27:31.166098 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:27:31.166077715 +0000 UTC m=+432.928232429 I0911 05:27:31.186807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:27:31.187459 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:27:31.187445782 +0000 UTC m=+432.949600496 I0911 05:27:31.205843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:27:31.206082 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:27:31.206075845 +0000 UTC m=+432.968230519 I0911 05:27:36.090673 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:27:36.090655576 +0000 UTC m=+437.852810280 I0911 05:28:18.364059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:28:18.364198 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-11 05:28:18.364158591 +0000 UTC m=+480.126313275 I0911 05:28:18.364512 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-11 05:28:18.364506178 +0000 UTC m=+480.126660862 I0911 05:28:18.382499 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-11 05:28:18.382488705 +0000 UTC m=+480.144643369 I0911 05:28:18.382755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:28:18.382803 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-11 05:28:18.38279941 +0000 UTC m=+480.144954084 I0911 05:28:18.382883 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-11 05:28:18.382872362 +0000 UTC m=+480.145027036 I0911 05:28:18.382918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:28:18.382931 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-11 05:28:18.382928413 +0000 UTC m=+480.145083087 I0911 05:28:18.419719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:18.419799 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-11 05:28:18.419792392 +0000 UTC m=+480.181947066 I0911 05:28:18.421979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:18.422031 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-11 05:28:18.422025321 +0000 UTC m=+480.184179995 I0911 05:28:18.424731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:18.425558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:28:18.425577 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-11 05:28:18.425573934 +0000 UTC m=+480.187728608 I0911 05:28:18.488636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:18.524194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k59qt" condition "Approved" to 2026-09-11 05:28:18.524180152 +0000 UTC m=+480.286334826 I0911 05:28:18.541870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k59qt" condition "Ready" to 2026-09-11 05:28:18.541862453 +0000 UTC m=+480.304017127 I0911 05:28:18.570281 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:28:18.570269694 +0000 UTC m=+480.332424368 I0911 05:28:18.576641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:18.584228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:18.584691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9b95f" condition "Approved" to 2026-09-11 05:28:18.584676248 +0000 UTC m=+480.346830932 I0911 05:28:18.595675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:18.596664 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:28:18.596658379 +0000 UTC m=+480.358813053 I0911 05:28:18.602234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9b95f" condition "Ready" to 2026-09-11 05:28:18.602222567 +0000 UTC m=+480.364377241 I0911 05:28:18.640079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m5vt9" condition "Approved" to 2026-09-11 05:28:18.640047944 +0000 UTC m=+480.402202618 I0911 05:28:18.844227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:18.951412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m5vt9" condition "Ready" to 2026-09-11 05:28:18.95138234 +0000 UTC m=+480.713537024 I0911 05:28:19.291553 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:28:19.291541789 +0000 UTC m=+481.053696453 I0911 05:28:19.645578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:19.645921 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:28:19.645915745 +0000 UTC m=+481.408070429 I0911 05:28:19.690308 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:28:19.690298386 +0000 UTC m=+481.452453050 I0911 05:28:19.992319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:19.992741 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:28:19.992730888 +0000 UTC m=+481.754885602 I0911 05:28:20.046734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:20.102033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:20.342090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:28.145799 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls" condition "Ready" to 2026-09-11 05:28:28.145788343 +0000 UTC m=+489.907943017 I0911 05:28:28.145838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:28:28.146276 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls" condition "Issuing" to 2026-09-11 05:28:28.14624428 +0000 UTC m=+489.908398984 I0911 05:28:28.159409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:28.159526 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls" condition "Ready" to 2026-09-11 05:28:28.159514791 +0000 UTC m=+489.921669475 I0911 05:28:28.316374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:28.360818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4jgm2-nn6z9" condition "Approved" to 2026-09-11 05:28:28.360804711 +0000 UTC m=+490.122959395 I0911 05:28:28.382851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4jgm2-nn6z9" condition "Ready" to 2026-09-11 05:28:28.382842654 +0000 UTC m=+490.144997328 I0911 05:28:28.413218 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:28:28.413202932 +0000 UTC m=+490.175357626 I0911 05:28:28.429852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4jgm2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:42.190199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:28:42.190251 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-11 05:28:42.190239698 +0000 UTC m=+503.952394402 I0911 05:28:42.190493 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-11 05:28:42.190485182 +0000 UTC m=+503.952639886 I0911 05:28:42.208972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:42.209053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:28:42.209072 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-11 05:28:42.209066869 +0000 UTC m=+503.971221533 I0911 05:28:42.653605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rc2l9" condition "Approved" to 2026-09-11 05:28:42.653586902 +0000 UTC m=+504.415741616 I0911 05:28:42.679423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rc2l9" condition "Ready" to 2026-09-11 05:28:42.679403573 +0000 UTC m=+504.441558287 I0911 05:28:42.717355 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:28:42.717346351 +0000 UTC m=+504.479501025 I0911 05:28:42.748227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:28:42.803384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:31:50.389051 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:31:50.389686 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-11 05:31:50.38911095 +0000 UTC m=+692.151265634 I0911 05:31:50.389687 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-11 05:31:50.388836178 +0000 UTC m=+692.150990892 I0911 05:31:50.416421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:31:50.416757 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-11 05:31:50.416718519 +0000 UTC m=+692.178873223 I0911 05:31:50.529921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:31:50.562579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jbwxb" condition "Approved" to 2026-09-11 05:31:50.562562362 +0000 UTC m=+692.324717066 I0911 05:31:50.584144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jbwxb" condition "Ready" to 2026-09-11 05:31:50.584131413 +0000 UTC m=+692.346286097 I0911 05:31:50.622800 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:31:50.622790403 +0000 UTC m=+692.384945067 I0911 05:31:50.643777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:31:50.644381 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:31:50.644373174 +0000 UTC m=+692.406527848 I0911 05:31:50.673136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:32:30.420592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:32:30.420666 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-11 05:32:30.420657388 +0000 UTC m=+732.182812102 I0911 05:32:30.420895 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-11 05:32:30.420890637 +0000 UTC m=+732.183045301 I0911 05:32:30.442180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0911 05:32:30.442286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0911 05:32:30.442315 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-11 05:32:30.442308578 +0000 UTC m=+732.204463252 I0911 05:32:30.724401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dp955" condition "Approved" to 2026-09-11 05:32:30.724389119 +0000 UTC m=+732.486543793 I0911 05:32:30.746206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dp955" condition "Ready" to 2026-09-11 05:32:30.746195116 +0000 UTC m=+732.508349800 I0911 05:32:30.782142 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-11 05:32:30.782131287 +0000 UTC m=+732.544285961 I0911 05:32:30.812605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"