I0825 19:06:18.256653 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0825 19:06:18.256786 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0825 19:06:18.256882 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0825 19:06:18.263284 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0825 19:06:18.263620 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0825 19:06:18.263717 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0825 19:06:18.263800 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0825 19:06:18.265996 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0825 19:06:18.281902 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0825 19:06:18.285788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0825 19:06:18.288301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0825 19:06:18.292810 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0825 19:06:18.296211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0825 19:06:18.298831 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0825 19:06:18.298869 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0825 19:06:18.298869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0825 19:06:18.301630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0825 19:06:18.303675 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0825 19:06:18.305509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0825 19:06:18.307618 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0825 19:06:18.313069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0825 19:06:18.316699 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0825 19:06:18.316735 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0825 19:06:18.316770 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0825 19:06:18.320231 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0825 19:06:18.320316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0825 19:06:18.322895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0825 19:06:18.324606 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0825 19:06:18.326417 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0825 19:06:18.326569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0825 19:06:18.328569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0825 19:06:18.330153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0825 19:06:18.331751 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0825 19:06:18.336429 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.337607 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.338350 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.392829 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.392869 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.402649 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.411819 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.424452 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.438603 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:18.468713 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0825 19:06:32.087432 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-25 19:06:32.087415461 +0000 UTC m=+13.862470052 I0825 19:06:32.804057 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-25 19:06:32.8040388 +0000 UTC m=+14.579093451 I0825 19:06:32.805225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:06:32.805292 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-25 19:06:32.805282589 +0000 UTC m=+14.580337220 E0825 19:06:32.817172 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0825 19:06:32.817222 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-25 19:06:32.817216432 +0000 UTC m=+14.592271033 E0825 19:06:32.817242 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0825 19:06:32.819786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:06:32.819843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:06:32.819858 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-25 19:06:32.819853373 +0000 UTC m=+14.594907974 E0825 19:06:32.831916 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0825 19:06:32.832964 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:06:32.833028 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:06:32.834213 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0825 19:06:32.856112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:06:32.861207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6lgq9" condition "Approved" to 2026-08-25 19:06:32.86119489 +0000 UTC m=+14.636249501 I0825 19:06:32.871206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6lgq9" condition "Ready" to 2026-08-25 19:06:32.87119634 +0000 UTC m=+14.646250931 I0825 19:06:32.893085 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:06:32.893074422 +0000 UTC m=+14.668129033 I0825 19:06:32.911462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:06:37.832653 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:06:37.83263948 +0000 UTC m=+19.607694081 I0825 19:06:58.242188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:06:58.242267 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-25 19:06:58.242258764 +0000 UTC m=+40.017313365 I0825 19:06:58.242555 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-25 19:06:58.24253837 +0000 UTC m=+40.017593001 I0825 19:06:58.251736 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-25 19:06:58.251725073 +0000 UTC m=+40.026779654 I0825 19:06:58.262559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:06:58.262629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:06:58.262650 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-25 19:06:58.262644915 +0000 UTC m=+40.037699506 I0825 19:06:58.549706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:06:58.571983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-47gcq" condition "Approved" to 2026-08-25 19:06:58.571973504 +0000 UTC m=+40.347028105 I0825 19:06:58.605021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-47gcq" condition "Ready" to 2026-08-25 19:06:58.605006978 +0000 UTC m=+40.380061579 I0825 19:06:58.638357 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:06:58.638342599 +0000 UTC m=+40.413397200 I0825 19:06:58.655531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:11:15.046120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-136.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:11:15.046160 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-136.nip.io-tls" condition "Issuing" to 2026-08-25 19:11:15.046149998 +0000 UTC m=+296.821204619 I0825 19:11:15.046559 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-136.nip.io-tls" condition "Ready" to 2026-08-25 19:11:15.046549858 +0000 UTC m=+296.821604479 I0825 19:11:15.061863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-136.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-136.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:11:15.061990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-136.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:11:15.062014 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-136.nip.io-tls" condition "Issuing" to 2026-08-25 19:11:15.062006864 +0000 UTC m=+296.837061495 I0825 19:11:15.286924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-136.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-136.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:11:15.297991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-136.nip.io-tls-mc8zg" condition "Approved" to 2026-08-25 19:11:15.297984256 +0000 UTC m=+297.073038847 I0825 19:11:15.336477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-136.nip.io-tls-mc8zg" condition "Ready" to 2026-08-25 19:11:15.336468574 +0000 UTC m=+297.111523165 I0825 19:11:15.359312 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-136.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:11:15.359303001 +0000 UTC m=+297.134357602 I0825 19:11:15.385019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-136.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-136.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:11:15.385290 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-136.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:11:15.385284529 +0000 UTC m=+297.160339130 I0825 19:11:15.395412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-136.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-136.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:11:15.403813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-136.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-136.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:14.789981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:12:14.790011 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-25 19:12:14.790003627 +0000 UTC m=+356.565058218 I0825 19:12:14.790079 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-25 19:12:14.790027178 +0000 UTC m=+356.565081779 E0825 19:12:14.804328 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0825 19:12:14.804366 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-25 19:12:14.80435815 +0000 UTC m=+356.579412761 E0825 19:12:14.804414 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0825 19:12:14.806209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:14.806395 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-25 19:12:14.806378967 +0000 UTC m=+356.581433568 E0825 19:12:14.814121 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0825 19:12:14.814909 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:12:14.814980 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:12:14.815015 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0825 19:12:14.822961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:14.840337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d8sqb" condition "Approved" to 2026-08-25 19:12:14.840326733 +0000 UTC m=+356.615381334 I0825 19:12:14.852723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d8sqb" condition "Ready" to 2026-08-25 19:12:14.852713099 +0000 UTC m=+356.627767700 I0825 19:12:14.872644 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:12:14.872636031 +0000 UTC m=+356.647690632 I0825 19:12:14.886350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:19.815458 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:12:19.815439252 +0000 UTC m=+361.590493883 I0825 19:13:01.109879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:01.110785 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-25 19:13:01.110773174 +0000 UTC m=+402.885827755 I0825 19:13:01.119007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:01.120082 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-25 19:13:01.120069009 +0000 UTC m=+402.895123590 I0825 19:13:01.109908 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-25 19:13:01.109903574 +0000 UTC m=+402.884958165 I0825 19:13:01.119052 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-25 19:13:01.119046296 +0000 UTC m=+402.894100887 I0825 19:13:01.161402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:01.161477 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:01.161498 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-25 19:13:01.16149161 +0000 UTC m=+402.936546201 I0825 19:13:01.175405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:01.175451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:01.175467 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-25 19:13:01.175462315 +0000 UTC m=+402.950516916 I0825 19:13:01.175839 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-25 19:13:01.175827363 +0000 UTC m=+402.950881954 I0825 19:13:01.176105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:01.176127 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-25 19:13:01.17612242 +0000 UTC m=+402.951177031 I0825 19:13:01.229528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:01.230393 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-25 19:13:01.230382349 +0000 UTC m=+403.005436930 I0825 19:13:01.431828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:01.440051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2z766" condition "Approved" to 2026-08-25 19:13:01.440041224 +0000 UTC m=+403.215095815 I0825 19:13:01.483496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2z766" condition "Ready" to 2026-08-25 19:13:01.483478901 +0000 UTC m=+403.258533522 I0825 19:13:01.527923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xgwfm" condition "Approved" to 2026-08-25 19:13:01.527901552 +0000 UTC m=+403.302966943 I0825 19:13:01.547254 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:01.547242711 +0000 UTC m=+403.322297302 I0825 19:13:01.565288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xgwfm" condition "Ready" to 2026-08-25 19:13:01.565279529 +0000 UTC m=+403.340334120 I0825 19:13:01.575465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:01.575649 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:01.57564582 +0000 UTC m=+403.350700411 I0825 19:13:01.603558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:01.611559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:01.612383 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:01.612375992 +0000 UTC m=+403.387430583 I0825 19:13:01.683421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:01.683706 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:01.683700127 +0000 UTC m=+403.458754718 I0825 19:13:01.734535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x2pnq" condition "Approved" to 2026-08-25 19:13:01.734524487 +0000 UTC m=+403.509579088 E0825 19:13:01.936005 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-pphwn\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0825 19:13:01.984277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x2pnq" condition "Ready" to 2026-08-25 19:13:01.984263481 +0000 UTC m=+403.759318112 I0825 19:13:02.328654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:02.627223 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:02.627208278 +0000 UTC m=+404.402262879 I0825 19:13:02.675107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:02.775657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:02.776144 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:02.776135094 +0000 UTC m=+404.551189725 I0825 19:13:03.025758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:03.074170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:17.391659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:17.391698 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" condition "Issuing" to 2026-08-25 19:13:17.391688692 +0000 UTC m=+419.166743313 I0825 19:13:17.392162 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" condition "Ready" to 2026-08-25 19:13:17.392154642 +0000 UTC m=+419.167209263 I0825 19:13:17.405343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:17.405386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:17.405396 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" condition "Issuing" to 2026-08-25 19:13:17.40539233 +0000 UTC m=+419.180446921 I0825 19:13:17.543642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dvxnp-5l4kc" condition "Approved" to 2026-08-25 19:13:17.543628128 +0000 UTC m=+419.318682719 I0825 19:13:17.568179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dvxnp-5l4kc" condition "Ready" to 2026-08-25 19:13:17.568168159 +0000 UTC m=+419.343222750 I0825 19:13:17.599077 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:17.599061096 +0000 UTC m=+419.374115687 I0825 19:13:17.619025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:17.673378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvxnp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:22.611327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:22.611357 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-25 19:13:22.61134962 +0000 UTC m=+424.386404221 I0825 19:13:22.611642 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-25 19:13:22.611637886 +0000 UTC m=+424.386692487 I0825 19:13:22.638165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:22.638226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-25 19:13:22.638219794 +0000 UTC m=+424.413274395 I0825 19:13:22.755970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:22.810612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lphc4" condition "Approved" to 2026-08-25 19:13:22.810598635 +0000 UTC m=+424.585653246 I0825 19:13:22.838042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lphc4" condition "Ready" to 2026-08-25 19:13:22.838031883 +0000 UTC m=+424.613086474 I0825 19:13:22.872750 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:22.872738448 +0000 UTC m=+424.647793039 I0825 19:13:22.897147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:22.958748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:16:23.824875 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-25 19:16:23.824281935 +0000 UTC m=+605.599336566 I0825 19:16:23.825112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:16:23.825225 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-25 19:16:23.825213697 +0000 UTC m=+605.600268308 I0825 19:16:23.847035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:16:23.847140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:16:23.847180 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-25 19:16:23.847170628 +0000 UTC m=+605.622225249 I0825 19:16:24.192032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:16:24.199327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fcjg7" condition "Approved" to 2026-08-25 19:16:24.199315388 +0000 UTC m=+605.974369989 I0825 19:16:24.212446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fcjg7" condition "Ready" to 2026-08-25 19:16:24.212437754 +0000 UTC m=+605.987492345 I0825 19:16:24.236606 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:16:24.236597696 +0000 UTC m=+606.011652297 I0825 19:16:24.259664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:16:24.321337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:16:59.821024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:16:59.821057 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-25 19:16:59.821049996 +0000 UTC m=+641.596104577 I0825 19:16:59.821022 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-25 19:16:59.820972565 +0000 UTC m=+641.596027146 I0825 19:16:59.847970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:16:59.848022 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-25 19:16:59.84801521 +0000 UTC m=+641.623069801 I0825 19:16:59.999635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:17:00.035197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8c8zl" condition "Approved" to 2026-08-25 19:17:00.035185865 +0000 UTC m=+641.810240466 I0825 19:17:00.056015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8c8zl" condition "Ready" to 2026-08-25 19:17:00.056006226 +0000 UTC m=+641.831060827 I0825 19:17:00.087194 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:17:00.087171149 +0000 UTC m=+641.862225730 I0825 19:17:00.106189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:17:00.158400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"