I0907 18:17:39.470804 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0907 18:17:39.470963 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0907 18:17:39.471192 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0907 18:17:39.479726 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0907 18:17:39.480573 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0907 18:17:39.480824 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0907 18:17:39.480847 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0907 18:17:39.485548 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0907 18:17:39.499071 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0907 18:17:39.502440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0907 18:17:39.505550 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0907 18:17:39.505585 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0907 18:17:39.505595 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0907 18:17:39.505588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0907 18:17:39.511440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0907 18:17:39.513961 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0907 18:17:39.516668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0907 18:17:39.519020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0907 18:17:39.521527 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0907 18:17:39.524483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0907 18:17:39.528145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0907 18:17:39.535302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0907 18:17:39.539794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0907 18:17:39.543702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0907 18:17:39.547603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0907 18:17:39.550699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0907 18:17:39.553169 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0907 18:17:39.553324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0907 18:17:39.555728 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0907 18:17:39.555749 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0907 18:17:39.555855 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0907 18:17:39.559788 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0907 18:17:39.564330 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0907 18:17:39.568037 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.569174 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.569529 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.582201 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.595482 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.608553 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.626323 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.646391 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.657055 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:39.660806 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:17:51.443232 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 18:17:51.443218437 +0000 UTC m=+12.006737415 I0907 18:17:52.112230 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 18:17:52.112212457 +0000 UTC m=+12.675731445 I0907 18:17:52.112397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:17:52.112434 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 18:17:52.112425523 +0000 UTC m=+12.675944511 E0907 18:17:52.125548 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 18:17:52.125611 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 18:17:52.125605394 +0000 UTC m=+12.689124342 E0907 18:17:52.125632 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 18:17:52.134885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0907 18:17:52.135595 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0907 18:17:52.135673 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 18:17:52.135530867 +0000 UTC m=+12.699049855 E0907 18:17:52.135696 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 18:17:52.135889 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 18:17:52.135919 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0907 18:17:52.160024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:17:52.181160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ww7f9" condition "Approved" to 2026-09-07 18:17:52.181151329 +0000 UTC m=+12.744670277 I0907 18:17:52.193221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ww7f9" condition "Ready" to 2026-09-07 18:17:52.193210427 +0000 UTC m=+12.756729375 I0907 18:17:52.214537 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:17:52.214528818 +0000 UTC m=+12.778047776 I0907 18:17:52.230424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:17:57.136430 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:17:57.136413602 +0000 UTC m=+17.699932580 I0907 18:18:21.359165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:18:21.359260 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 18:18:21.359250858 +0000 UTC m=+41.922769836 I0907 18:18:21.360213 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 18:18:21.360191867 +0000 UTC m=+41.923710855 I0907 18:18:21.383118 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 18:18:21.38308771 +0000 UTC m=+41.946606688 I0907 18:18:21.390403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:18:21.390458 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:18:21.390476 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 18:18:21.390470305 +0000 UTC m=+41.953989263 I0907 18:18:21.561561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:18:21.578538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6z9bs" condition "Approved" to 2026-09-07 18:18:21.578523454 +0000 UTC m=+42.142042432 I0907 18:18:21.616594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6z9bs" condition "Ready" to 2026-09-07 18:18:21.61658365 +0000 UTC m=+42.180102618 I0907 18:18:21.650556 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:18:21.650541496 +0000 UTC m=+42.214060454 I0907 18:18:21.686114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:18:21.686713 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:18:21.686704611 +0000 UTC m=+42.250223589 I0907 18:18:21.709149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:18:21.714824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:24:01.344368 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-91.nip.io-tls" condition "Ready" to 2026-09-07 18:24:01.34435244 +0000 UTC m=+381.907871418 I0907 18:24:01.344722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-91.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:24:01.344829 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-91.nip.io-tls" condition "Issuing" to 2026-09-07 18:24:01.344800082 +0000 UTC m=+381.908319060 I0907 18:24:01.363404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:24:01.363490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-91.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:24:01.363675 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-91.nip.io-tls" condition "Issuing" to 2026-09-07 18:24:01.363663048 +0000 UTC m=+381.927182056 I0907 18:24:01.568638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:24:01.577917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-91.nip.io-tls-xjxc6" condition "Approved" to 2026-09-07 18:24:01.577912417 +0000 UTC m=+382.141431365 I0907 18:24:01.609828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-91.nip.io-tls-xjxc6" condition "Ready" to 2026-09-07 18:24:01.609799312 +0000 UTC m=+382.173318260 I0907 18:24:01.643538 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-91.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:24:01.643523991 +0000 UTC m=+382.207042969 I0907 18:24:01.666509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:24:01.713606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:25:14.980002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:25:14.980044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 18:25:14.980031301 +0000 UTC m=+455.543550269 I0907 18:25:14.980591 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 18:25:14.980584187 +0000 UTC m=+455.544103155 E0907 18:25:14.998468 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 18:25:14.998539 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 18:25:14.9985313 +0000 UTC m=+455.562050248 E0907 18:25:14.998563 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 18:25:14.998939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:25:14.999157 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 18:25:14.999148229 +0000 UTC m=+455.562667217 E0907 18:25:15.027107 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0907 18:25:15.027215 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 18:25:15.027256 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 18:25:15.027311 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0907 18:25:15.035073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:25:15.035177 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 18:25:15.035169568 +0000 UTC m=+455.598688516 I0907 18:25:15.036049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:25:15.042867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bl99w" condition "Approved" to 2026-09-07 18:25:15.042855979 +0000 UTC m=+455.606374947 I0907 18:25:15.055317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bl99w" condition "Ready" to 2026-09-07 18:25:15.055302796 +0000 UTC m=+455.618821754 I0907 18:25:15.078138 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:25:15.078115166 +0000 UTC m=+455.641634144 I0907 18:25:15.092805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:25:15.093103 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:25:15.093090429 +0000 UTC m=+455.656609407 I0907 18:25:15.109832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:25:15.110638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:25:20.027624 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:25:20.027606332 +0000 UTC m=+460.591125310 I0907 18:26:00.885292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:00.885316 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 18:26:00.885311602 +0000 UTC m=+501.448830550 I0907 18:26:00.885503 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 18:26:00.885499048 +0000 UTC m=+501.449017996 I0907 18:26:00.885688 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 18:26:00.885685383 +0000 UTC m=+501.449204331 I0907 18:26:00.885846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:00.885854 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 18:26:00.885851798 +0000 UTC m=+501.449370746 I0907 18:26:00.900743 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 18:26:00.900730998 +0000 UTC m=+501.464249946 I0907 18:26:00.901106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:00.901126 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 18:26:00.90112257 +0000 UTC m=+501.464641508 I0907 18:26:00.936783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:00.936879 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 18:26:00.936854106 +0000 UTC m=+501.500373054 I0907 18:26:00.956138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:00.956190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:00.956207 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 18:26:00.956202874 +0000 UTC m=+501.519721822 I0907 18:26:00.959504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:00.959569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:00.959623 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 18:26:00.95961873 +0000 UTC m=+501.523137678 I0907 18:26:01.200011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:01.214421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-c78vs" condition "Approved" to 2026-09-07 18:26:01.214411994 +0000 UTC m=+501.777930942 I0907 18:26:01.248204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-c78vs" condition "Ready" to 2026-09-07 18:26:01.248194909 +0000 UTC m=+501.811713857 I0907 18:26:01.256977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:01.295783 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:01.295774131 +0000 UTC m=+501.859293079 I0907 18:26:01.334109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fgj6j" condition "Approved" to 2026-09-07 18:26:01.334101387 +0000 UTC m=+501.897620335 I0907 18:26:01.334554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v6mmv" condition "Approved" to 2026-09-07 18:26:01.334550381 +0000 UTC m=+501.898069319 I0907 18:26:01.338159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:01.338414 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:01.33840898 +0000 UTC m=+501.901927928 I0907 18:26:01.356008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fgj6j" condition "Ready" to 2026-09-07 18:26:01.355998175 +0000 UTC m=+501.919517123 I0907 18:26:01.357838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v6mmv" condition "Ready" to 2026-09-07 18:26:01.357833031 +0000 UTC m=+501.921351979 I0907 18:26:01.360262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:01.360419 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:01.360414491 +0000 UTC m=+501.923933439 E0907 18:26:01.766717 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-gvtdb\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0907 18:26:01.935287 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:01.935226138 +0000 UTC m=+502.498745086 I0907 18:26:01.990500 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:01.990483549 +0000 UTC m=+502.554002527 I0907 18:26:02.116768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:02.117276 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:02.117268203 +0000 UTC m=+502.680787171 I0907 18:26:02.241285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:02.242184 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:02.24217206 +0000 UTC m=+502.805691048 I0907 18:26:02.565386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:02.666122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:02.718265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:10.266896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:10.266935 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" condition "Issuing" to 2026-09-07 18:26:10.266918812 +0000 UTC m=+510.830437760 I0907 18:26:10.267147 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" condition "Ready" to 2026-09-07 18:26:10.26713633 +0000 UTC m=+510.830655308 I0907 18:26:10.281409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:10.281478 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" condition "Ready" to 2026-09-07 18:26:10.281469125 +0000 UTC m=+510.844988103 I0907 18:26:10.504236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:10.555461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5fhxf-d65bn" condition "Approved" to 2026-09-07 18:26:10.555447622 +0000 UTC m=+511.118966600 I0907 18:26:10.659288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5fhxf-d65bn" condition "Ready" to 2026-09-07 18:26:10.659269588 +0000 UTC m=+511.222788566 I0907 18:26:10.704543 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:10.704516842 +0000 UTC m=+511.268035800 I0907 18:26:10.729259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:10.826192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5fhxf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:22.423201 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:22.423225 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 18:26:22.423219214 +0000 UTC m=+522.986738162 I0907 18:26:22.423242 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 18:26:22.423226925 +0000 UTC m=+522.986745883 I0907 18:26:22.438389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:22.438443 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 18:26:22.438437489 +0000 UTC m=+523.001956437 I0907 18:26:22.567982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:22.659019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kbz29" condition "Approved" to 2026-09-07 18:26:22.659003938 +0000 UTC m=+523.222522906 I0907 18:26:22.678363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kbz29" condition "Ready" to 2026-09-07 18:26:22.678351482 +0000 UTC m=+523.241870430 I0907 18:26:22.702633 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:22.702621829 +0000 UTC m=+523.266140777 I0907 18:26:22.722840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:29:36.510175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:29:36.510220 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 18:29:36.510213407 +0000 UTC m=+717.073732355 I0907 18:29:36.510226 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 18:29:36.510214837 +0000 UTC m=+717.073733815 I0907 18:29:36.528643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:29:36.528773 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 18:29:36.528762725 +0000 UTC m=+717.092281703 I0907 18:29:36.678180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:29:36.711884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-t4vbg" condition "Approved" to 2026-09-07 18:29:36.711873163 +0000 UTC m=+717.275392111 I0907 18:29:36.735555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-t4vbg" condition "Ready" to 2026-09-07 18:29:36.735544345 +0000 UTC m=+717.299063303 I0907 18:29:36.764033 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:29:36.764021775 +0000 UTC m=+717.327540723 I0907 18:29:36.790124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:30:19.811884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:30:19.812289 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 18:30:19.812282061 +0000 UTC m=+760.375801019 I0907 18:30:19.812198 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-07 18:30:19.81219055 +0000 UTC m=+760.375709498 I0907 18:30:19.849028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:30:19.849254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:30:19.849340 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 18:30:19.849331705 +0000 UTC m=+760.412850683 I0907 18:30:20.021022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:30:20.039066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-55n6z" condition "Approved" to 2026-09-07 18:30:20.039058011 +0000 UTC m=+760.602576949 I0907 18:30:20.062056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-55n6z" condition "Ready" to 2026-09-07 18:30:20.062045849 +0000 UTC m=+760.625564797 I0907 18:30:20.094074 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:30:20.09406208 +0000 UTC m=+760.657581028 I0907 18:30:20.114543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"