I0910 01:54:09.186506 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0910 01:54:09.186643 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 01:54:09.186862 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 01:54:09.194339 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 01:54:09.195000 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0910 01:54:09.196906 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 01:54:09.196906 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 01:54:09.199483 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 01:54:09.223774 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 01:54:09.231824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 01:54:09.235580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 01:54:09.239451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 01:54:09.242779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 01:54:09.246644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 01:54:09.252076 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 01:54:09.256209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0910 01:54:09.260481 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 01:54:09.260524 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 01:54:09.260563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 01:54:09.265050 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 01:54:09.268483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 01:54:09.271203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 01:54:09.274090 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 01:54:09.274122 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 01:54:09.274167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 01:54:09.278507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 01:54:09.282781 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 01:54:09.282855 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 01:54:09.286388 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 01:54:09.286556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 01:54:09.290107 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 01:54:09.293781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 01:54:09.298447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 01:54:09.305461 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.305588 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.306200 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.309126 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.325925 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.353583 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.377749 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.398942 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.401538 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:09.421553 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:54:19.823584 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 01:54:19.823538238 +0000 UTC m=+10.677655364 I0910 01:54:20.628038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 01:54:20.628131 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 01:54:20.628121094 +0000 UTC m=+11.482238220 I0910 01:54:20.628012 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 01:54:20.62798701 +0000 UTC m=+11.482104146 E0910 01:54:20.645571 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 01:54:20.645690 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 01:54:20.645679302 +0000 UTC m=+11.499796438 E0910 01:54:20.645729 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 01:54:20.651607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:54:20.651891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 01:54:20.652013 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 01:54:20.651999517 +0000 UTC m=+11.506116643 E0910 01:54:20.668018 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0910 01:54:20.668264 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 01:54:20.668340 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 01:54:20.668420 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0910 01:54:20.706773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gjlk4" condition "Approved" to 2026-09-10 01:54:20.70675705 +0000 UTC m=+11.560874186 I0910 01:54:20.725553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gjlk4" condition "Ready" to 2026-09-10 01:54:20.725534732 +0000 UTC m=+11.579651838 I0910 01:54:20.754350 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:54:20.754332382 +0000 UTC m=+11.608449488 I0910 01:54:20.773496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:54:20.773843 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:54:20.773833535 +0000 UTC m=+11.627950641 I0910 01:54:20.794639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:54:25.668877 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:54:25.668866838 +0000 UTC m=+16.522983934 I0910 01:54:50.179210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 01:54:50.179257 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 01:54:50.179249737 +0000 UTC m=+41.033366843 I0910 01:54:50.179608 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 01:54:50.179575854 +0000 UTC m=+41.033692990 I0910 01:54:50.198728 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 01:54:50.198716315 +0000 UTC m=+41.052833421 I0910 01:54:50.245402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:54:50.245961 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 01:54:50.245951604 +0000 UTC m=+41.100068710 I0910 01:54:50.413616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:54:50.452315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-74rkx" condition "Approved" to 2026-09-10 01:54:50.45230661 +0000 UTC m=+41.306423706 I0910 01:54:50.491319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-74rkx" condition "Ready" to 2026-09-10 01:54:50.491301479 +0000 UTC m=+41.345418615 I0910 01:54:50.539016 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:54:50.539000119 +0000 UTC m=+41.393117245 I0910 01:54:50.571533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:54:50.571883 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:54:50.571876666 +0000 UTC m=+41.425993772 I0910 01:54:50.578096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:54:50.594884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:39.467341 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-105.nip.io-tls" condition "Ready" to 2026-09-10 01:59:39.467288969 +0000 UTC m=+330.321406105 I0910 01:59:39.467581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-105.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 01:59:39.467637 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-105.nip.io-tls" condition "Issuing" to 2026-09-10 01:59:39.467628267 +0000 UTC m=+330.321745373 I0910 01:59:39.488950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:39.489071 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-105.nip.io-tls" condition "Ready" to 2026-09-10 01:59:39.489009245 +0000 UTC m=+330.343126351 I0910 01:59:39.681670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:39.715880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-105.nip.io-tls-vfvm7" condition "Approved" to 2026-09-10 01:59:39.71583867 +0000 UTC m=+330.569955766 I0910 01:59:39.750470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-105.nip.io-tls-vfvm7" condition "Ready" to 2026-09-10 01:59:39.750457843 +0000 UTC m=+330.604574969 I0910 01:59:39.793570 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-105.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:59:39.793550326 +0000 UTC m=+330.647667462 I0910 01:59:39.822413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:39.880184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:00:46.236449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:00:46.236541 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 02:00:46.236495714 +0000 UTC m=+397.090612840 I0910 02:00:46.236583 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 02:00:46.236573416 +0000 UTC m=+397.090690552 E0910 02:00:46.253685 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 02:00:46.253736 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 02:00:46.25372469 +0000 UTC m=+397.107841816 E0910 02:00:46.253859 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 02:00:46.255411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:00:46.255480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:00:46.255497 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 02:00:46.255489999 +0000 UTC m=+397.109607125 E0910 02:00:46.268032 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0910 02:00:46.268189 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 02:00:46.268325 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 02:00:46.268438 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0910 02:00:46.304555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:00:46.304686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fjkbs" condition "Approved" to 2026-09-10 02:00:46.304629463 +0000 UTC m=+397.158746649 I0910 02:00:46.320811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fjkbs" condition "Ready" to 2026-09-10 02:00:46.320799946 +0000 UTC m=+397.174917052 I0910 02:00:46.347639 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:00:46.347591451 +0000 UTC m=+397.201708577 I0910 02:00:46.369531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:00:46.370443 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:00:46.370117794 +0000 UTC m=+397.224234930 I0910 02:00:46.384673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:00:46.385346 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:00:46.385331936 +0000 UTC m=+397.239449062 I0910 02:00:51.268511 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:00:51.268494627 +0000 UTC m=+402.122611763 I0910 02:01:31.175532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:31.175655 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 02:01:31.175581261 +0000 UTC m=+442.029698357 I0910 02:01:31.175774 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 02:01:31.175765825 +0000 UTC m=+442.029882921 I0910 02:01:31.175835 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 02:01:31.175782736 +0000 UTC m=+442.029899832 I0910 02:01:31.175866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:31.176175 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 02:01:31.176169794 +0000 UTC m=+442.030286890 I0910 02:01:31.180442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:31.180491 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 02:01:31.180485533 +0000 UTC m=+442.034602619 I0910 02:01:31.180902 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 02:01:31.180888711 +0000 UTC m=+442.035005807 I0910 02:01:31.212334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:31.212438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:31.212896 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 02:01:31.212889012 +0000 UTC m=+442.067006108 I0910 02:01:31.213223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:31.213241 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 02:01:31.213237169 +0000 UTC m=+442.067354265 I0910 02:01:31.224928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:31.225009 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 02:01:31.225002732 +0000 UTC m=+442.079119818 I0910 02:01:31.392467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:31.440742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m5pv7" condition "Approved" to 2026-09-10 02:01:31.440734114 +0000 UTC m=+442.294851200 I0910 02:01:31.469218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m5pv7" condition "Ready" to 2026-09-10 02:01:31.469208302 +0000 UTC m=+442.323325398 I0910 02:01:31.477630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-h6h25" condition "Approved" to 2026-09-10 02:01:31.477620956 +0000 UTC m=+442.331738052 I0910 02:01:31.502530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-h6h25" condition "Ready" to 2026-09-10 02:01:31.50252278 +0000 UTC m=+442.356639866 I0910 02:01:31.522358 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:31.522337609 +0000 UTC m=+442.376454705 I0910 02:01:31.543308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:31.552271 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:31.552260426 +0000 UTC m=+442.406377512 I0910 02:01:31.604564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:31.604824 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:31.604819851 +0000 UTC m=+442.458936937 I0910 02:01:31.786733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:31.887570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:31.938924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:32.147252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lrqjv" condition "Approved" to 2026-09-10 02:01:32.147239463 +0000 UTC m=+443.001356589 I0910 02:01:32.248688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lrqjv" condition "Ready" to 2026-09-10 02:01:32.248680025 +0000 UTC m=+443.102797111 I0910 02:01:32.690862 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:32.690699558 +0000 UTC m=+443.544816644 I0910 02:01:32.792191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:41.920629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:41.920657 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls" condition "Issuing" to 2026-09-10 02:01:41.920649925 +0000 UTC m=+452.774767031 I0910 02:01:41.921072 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls" condition "Ready" to 2026-09-10 02:01:41.921014953 +0000 UTC m=+452.775132059 I0910 02:01:41.934859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:41.934916 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls" condition "Ready" to 2026-09-10 02:01:41.934910726 +0000 UTC m=+452.789027822 I0910 02:01:42.097764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:42.136890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bwsg7-vscxp" condition "Approved" to 2026-09-10 02:01:42.136878119 +0000 UTC m=+452.990995215 I0910 02:01:42.159586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bwsg7-vscxp" condition "Ready" to 2026-09-10 02:01:42.159578952 +0000 UTC m=+453.013696038 I0910 02:01:42.185754 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:42.185739185 +0000 UTC m=+453.039856291 I0910 02:01:42.202994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bwsg7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:57.438638 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 02:01:57.438626851 +0000 UTC m=+468.292743937 I0910 02:01:57.438927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:57.438972 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 02:01:57.438965658 +0000 UTC m=+468.293082754 I0910 02:01:57.457171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:57.457258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:57.457344 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 02:01:57.457338407 +0000 UTC m=+468.311455523 I0910 02:01:57.778161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mh84f" condition "Approved" to 2026-09-10 02:01:57.77814989 +0000 UTC m=+468.632266996 I0910 02:01:57.806811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mh84f" condition "Ready" to 2026-09-10 02:01:57.806801926 +0000 UTC m=+468.660919032 I0910 02:01:57.836501 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:57.836489573 +0000 UTC m=+468.690606679 I0910 02:01:57.862563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:57.863022 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:57.863017297 +0000 UTC m=+468.717134393 I0910 02:01:57.885306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:57.885539 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:57.885532849 +0000 UTC m=+468.739649945 I0910 02:05:14.755650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:05:14.755711 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 02:05:14.755700902 +0000 UTC m=+665.609818028 I0910 02:05:14.755919 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 02:05:14.755899796 +0000 UTC m=+665.610016932 I0910 02:05:14.779277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:14.779380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:05:14.779409 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 02:05:14.779400725 +0000 UTC m=+665.633517861 I0910 02:05:15.088941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:15.099217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nc6kh" condition "Approved" to 2026-09-10 02:05:15.09917738 +0000 UTC m=+665.953294476 I0910 02:05:15.133466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nc6kh" condition "Ready" to 2026-09-10 02:05:15.133439366 +0000 UTC m=+665.987556472 I0910 02:05:15.171966 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:05:15.171936379 +0000 UTC m=+666.026053485 I0910 02:05:15.190978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:15.191365 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:05:15.191360104 +0000 UTC m=+666.045477200 I0910 02:05:15.198623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:15.211117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:58.881599 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-10 02:05:58.881580721 +0000 UTC m=+709.735697847 I0910 02:05:58.881720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:05:58.893111 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-10 02:05:58.893091598 +0000 UTC m=+709.747208784 I0910 02:05:58.924657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:58.924757 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-10 02:05:58.924748125 +0000 UTC m=+709.778865251 I0910 02:05:59.028518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:59.073689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2s92r" condition "Approved" to 2026-09-10 02:05:59.073680466 +0000 UTC m=+709.927797572 I0910 02:05:59.099884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2s92r" condition "Ready" to 2026-09-10 02:05:59.099872583 +0000 UTC m=+709.953989689 I0910 02:05:59.131791 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:05:59.131779646 +0000 UTC m=+709.985896752 I0910 02:05:59.153903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:59.160993 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:05:59.160977902 +0000 UTC m=+710.015094998 I0910 02:05:59.174773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:59.175031 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:05:59.17502613 +0000 UTC m=+710.029143226