I0822 10:30:46.018515 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0822 10:30:46.018594 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0822 10:30:46.018640 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0822 10:30:46.022645 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0822 10:30:46.023223 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0822 10:30:46.023431 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0822 10:30:46.023432 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0822 10:30:46.024960 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0822 10:30:46.037982 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0822 10:30:46.041709 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0822 10:30:46.041859 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0822 10:30:46.041762 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0822 10:30:46.044968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0822 10:30:46.050275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0822 10:30:46.052265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0822 10:30:46.053915 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0822 10:30:46.053963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0822 10:30:46.055921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0822 10:30:46.057727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0822 10:30:46.059486 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0822 10:30:46.062727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0822 10:30:46.066132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0822 10:30:46.067955 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0822 10:30:46.068039 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0822 10:30:46.068060 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0822 10:30:46.068164 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0822 10:30:46.070086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0822 10:30:46.072073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0822 10:30:46.073906 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0822 10:30:46.075884 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0822 10:30:46.077651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0822 10:30:46.079546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0822 10:30:46.085591 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0822 10:30:46.091134 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.091138 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.091609 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.092959 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.105497 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.123571 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.143030 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.161258 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.175194 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:46.179857 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 10:30:58.175043 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-22 10:30:58.175008027 +0000 UTC m=+12.189351831 I0822 10:30:58.851216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:30:58.851274 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-22 10:30:58.851266436 +0000 UTC m=+12.865610200 I0822 10:30:58.851383 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 10:30:58.851365268 +0000 UTC m=+12.865709072 E0822 10:30:58.867377 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:30:58.867646 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-22 10:30:58.867633771 +0000 UTC m=+12.881977575 E0822 10:30:58.867706 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:30:58.871224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:30:58.871423 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 10:30:58.871380701 +0000 UTC m=+12.885724505 E0822 10:30:58.882126 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0822 10:30:58.882346 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:30:58.882387 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:30:58.882451 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0822 10:30:58.890622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:30:58.975667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vbt28" condition "Approved" to 2026-08-22 10:30:58.975650844 +0000 UTC m=+12.989994638 I0822 10:30:59.034978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vbt28" condition "Ready" to 2026-08-22 10:30:59.034963961 +0000 UTC m=+13.049307765 I0822 10:30:59.062393 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:30:59.062382326 +0000 UTC m=+13.076726090 I0822 10:30:59.092195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:03.883170 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:31:03.883124984 +0000 UTC m=+17.897468778 I0822 10:31:41.610536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:31:41.610633 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-22 10:31:41.610621006 +0000 UTC m=+55.624964780 I0822 10:31:41.610884 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-22 10:31:41.61086504 +0000 UTC m=+55.625208824 I0822 10:31:41.632059 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-22 10:31:41.632046895 +0000 UTC m=+55.646390679 I0822 10:31:41.634398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:41.634476 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-22 10:31:41.634469354 +0000 UTC m=+55.648813128 I0822 10:31:41.843260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:41.880233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gmbl2" condition "Approved" to 2026-08-22 10:31:41.880219863 +0000 UTC m=+55.894563647 I0822 10:31:41.925973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gmbl2" condition "Ready" to 2026-08-22 10:31:41.925961456 +0000 UTC m=+55.940305220 I0822 10:31:41.975066 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:31:41.975053142 +0000 UTC m=+55.989396916 I0822 10:31:42.008476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:42.009243 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:31:42.009232814 +0000 UTC m=+56.023576618 I0822 10:31:42.049097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:36:54.085241 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-08-22 10:36:54.085209816 +0000 UTC m=+368.099553620 I0822 10:36:54.085348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:36:54.085379 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-08-22 10:36:54.085372309 +0000 UTC m=+368.099716083 I0822 10:36:54.102188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:36:54.102334 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-08-22 10:36:54.102323985 +0000 UTC m=+368.116667779 I0822 10:36:54.493008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:36:54.523961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-thwks" condition "Approved" to 2026-08-22 10:36:54.523951332 +0000 UTC m=+368.538295106 I0822 10:36:54.562244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-thwks" condition "Ready" to 2026-08-22 10:36:54.562232897 +0000 UTC m=+368.576576671 I0822 10:36:54.584809 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:36:54.584797341 +0000 UTC m=+368.599141145 I0822 10:36:54.607838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:00.377066 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-22 10:38:00.377014625 +0000 UTC m=+434.391358419 I0822 10:38:00.377128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:38:00.377163 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-22 10:38:00.377155158 +0000 UTC m=+434.391498932 E0822 10:38:00.560975 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:38:00.561073 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-22 10:38:00.561061585 +0000 UTC m=+434.575405389 E0822 10:38:00.561272 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:38:00.566037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:00.566138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:38:00.566169 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-22 10:38:00.566160958 +0000 UTC m=+434.580504752 E0822 10:38:00.592557 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0822 10:38:00.592719 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:38:00.592770 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:38:00.592850 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0822 10:38:00.638066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:00.646095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gqgkw" condition "Approved" to 2026-08-22 10:38:00.646078614 +0000 UTC m=+434.660422408 I0822 10:38:00.860381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gqgkw" condition "Ready" to 2026-08-22 10:38:00.860371535 +0000 UTC m=+434.874715309 I0822 10:38:01.153196 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:38:01.153178481 +0000 UTC m=+435.167522275 I0822 10:38:01.181639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:01.243451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:05.593757 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:38:05.593746126 +0000 UTC m=+439.608089890 I0822 10:38:51.361920 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-22 10:38:51.361885227 +0000 UTC m=+485.376229001 I0822 10:38:51.362348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:38:51.372161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:38:51.372215 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-22 10:38:51.372207061 +0000 UTC m=+485.386550835 I0822 10:38:51.372311 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-22 10:38:51.372196911 +0000 UTC m=+485.386540675 I0822 10:38:51.372796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:38:51.372818 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 10:38:51.372813621 +0000 UTC m=+485.387157395 I0822 10:38:51.373130 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-22 10:38:51.373123786 +0000 UTC m=+485.387467560 I0822 10:38:51.373550 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 10:38:51.362385605 +0000 UTC m=+485.376729369 I0822 10:38:51.436949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:51.437009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:38:51.437027 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 10:38:51.437022323 +0000 UTC m=+485.451366087 I0822 10:38:51.437660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:51.437715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:38:51.437736 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 10:38:51.437731464 +0000 UTC m=+485.452075228 I0822 10:38:51.441525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:51.441565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:38:51.441578 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-22 10:38:51.441574729 +0000 UTC m=+485.455918493 I0822 10:38:51.596580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-p7k5l" condition "Approved" to 2026-08-22 10:38:51.59656932 +0000 UTC m=+485.610913094 I0822 10:38:51.644036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s5hc2" condition "Approved" to 2026-08-22 10:38:51.644028729 +0000 UTC m=+485.658372493 I0822 10:38:51.645728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-p7k5l" condition "Ready" to 2026-08-22 10:38:51.645723307 +0000 UTC m=+485.660067071 I0822 10:38:51.736378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s5hc2" condition "Ready" to 2026-08-22 10:38:51.736361065 +0000 UTC m=+485.750704829 I0822 10:38:51.761166 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:38:51.761149421 +0000 UTC m=+485.775493215 I0822 10:38:51.779575 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:38:51.779562412 +0000 UTC m=+485.793906176 I0822 10:38:51.782068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kcrww" condition "Approved" to 2026-08-22 10:38:51.782061054 +0000 UTC m=+485.796404818 I0822 10:38:51.785629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:51.786054 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:38:51.78604905 +0000 UTC m=+485.800392804 I0822 10:38:51.803423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:51.803613 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:38:51.803607517 +0000 UTC m=+485.817951281 I0822 10:38:52.121498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kcrww" condition "Ready" to 2026-08-22 10:38:52.121481988 +0000 UTC m=+486.135825762 I0822 10:38:52.198574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0822 10:38:52.444269 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-r4xqg\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0822 10:38:53.015717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:53.015923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:53.080905 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:38:53.080888514 +0000 UTC m=+487.095232308 I0822 10:38:53.246150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:38:53.246622 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:38:53.246612409 +0000 UTC m=+487.260956183 I0822 10:38:53.971460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:06.722754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:39:06.722791 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls" condition "Issuing" to 2026-08-22 10:39:06.722778518 +0000 UTC m=+500.737122292 I0822 10:39:06.723091 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls" condition "Ready" to 2026-08-22 10:39:06.723076043 +0000 UTC m=+500.737419817 I0822 10:39:06.735793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:06.735846 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls" condition "Ready" to 2026-08-22 10:39:06.735841574 +0000 UTC m=+500.750185348 I0822 10:39:07.132142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:07.293640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jdfrq-mjggl" condition "Approved" to 2026-08-22 10:39:07.293607892 +0000 UTC m=+501.307951666 I0822 10:39:07.336869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jdfrq-mjggl" condition "Ready" to 2026-08-22 10:39:07.336853545 +0000 UTC m=+501.351197329 I0822 10:39:07.534873 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:39:07.534859936 +0000 UTC m=+501.549203710 I0822 10:39:07.686166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jdfrq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:34.464845 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 10:39:34.464819262 +0000 UTC m=+528.479163036 I0822 10:39:34.464937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:39:34.464968 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-22 10:39:34.464960384 +0000 UTC m=+528.479304158 I0822 10:39:34.634910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:34.635001 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 10:39:34.634993583 +0000 UTC m=+528.649337367 I0822 10:39:34.838971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:35.227622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hff2k" condition "Approved" to 2026-08-22 10:39:35.227603682 +0000 UTC m=+529.241947466 I0822 10:39:35.327381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hff2k" condition "Ready" to 2026-08-22 10:39:35.32736589 +0000 UTC m=+529.341709664 I0822 10:39:36.120618 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:39:36.120607308 +0000 UTC m=+530.134951082 I0822 10:39:36.254305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:39:36.254836 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:39:36.254828048 +0000 UTC m=+530.269171812 I0822 10:39:37.148060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:02.611200 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-22 10:43:02.61116917 +0000 UTC m=+736.625512954 I0822 10:43:02.611509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:43:02.611569 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 10:43:02.611562901 +0000 UTC m=+736.625906675 I0822 10:43:02.635755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:02.635822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:43:02.635840 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 10:43:02.635834075 +0000 UTC m=+736.650177849 I0822 10:43:02.845817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bx85z" condition "Approved" to 2026-08-22 10:43:02.84580804 +0000 UTC m=+736.860151804 I0822 10:43:02.867548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bx85z" condition "Ready" to 2026-08-22 10:43:02.867526636 +0000 UTC m=+736.881870440 I0822 10:43:02.893977 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:43:02.893967446 +0000 UTC m=+736.908311210 I0822 10:43:02.920959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:02.964152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:54.642528 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:43:54.642581 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 10:43:54.642573943 +0000 UTC m=+788.656917717 I0822 10:43:54.642821 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-22 10:43:54.64281097 +0000 UTC m=+788.657154774 I0822 10:43:54.798433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:54.798628 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-22 10:43:54.79861977 +0000 UTC m=+788.812963574 I0822 10:43:55.263498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:55.405737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vfpzx" condition "Approved" to 2026-08-22 10:43:55.405728703 +0000 UTC m=+789.420072467 I0822 10:43:55.491647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vfpzx" condition "Ready" to 2026-08-22 10:43:55.491636783 +0000 UTC m=+789.505980557 I0822 10:43:55.675635 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:43:55.675625463 +0000 UTC m=+789.689969217 I0822 10:43:55.772321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:55.772779 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:43:55.772770758 +0000 UTC m=+789.787114532 I0822 10:43:55.837035 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:43:55.837024653 +0000 UTC m=+789.851368417 I0822 10:43:55.881887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:55.881935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:43:55.882869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"