I1017 10:47:25.947702 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I1017 10:47:25.947851 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W1017 10:47:25.947942 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I1017 10:47:25.959606 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I1017 10:47:25.960151 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I1017 10:47:25.960254 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I1017 10:47:25.960270 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I1017 10:47:25.964530 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I1017 10:47:25.983746 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I1017 10:47:25.988981 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I1017 10:47:25.993219 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I1017 10:47:26.000028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I1017 10:47:26.004384 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I1017 10:47:26.004439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I1017 10:47:26.008546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I1017 10:47:26.013268 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I1017 10:47:26.017353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I1017 10:47:26.021764 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I1017 10:47:26.021811 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I1017 10:47:26.021815 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I1017 10:47:26.025827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I1017 10:47:26.033410 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I1017 10:47:26.037492 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I1017 10:47:26.037685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I1017 10:47:26.041518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I1017 10:47:26.045446 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I1017 10:47:26.049864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I1017 10:47:26.053881 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I1017 10:47:26.057785 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I1017 10:47:26.057823 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I1017 10:47:26.057875 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I1017 10:47:26.061813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I1017 10:47:26.068501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I1017 10:47:26.073005 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.073409 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.073475 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.073845 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.102473 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.129522 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.145906 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.167205 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.187196 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:26.189243 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1017 10:47:36.821201 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-10-17 10:47:36.82118585 +0000 UTC m=+10.906180311 I1017 10:47:37.426593 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-10-17 10:47:37.426578828 +0000 UTC m=+11.511573289 I1017 10:47:37.427123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:47:37.427235 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-10-17 10:47:37.427224622 +0000 UTC m=+11.512219073 E1017 10:47:37.447223 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1017 10:47:37.447325 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-10-17 10:47:37.447313582 +0000 UTC m=+11.532308043 E1017 10:47:37.447511 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1017 10:47:37.451838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:47:37.451922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:47:37.451948 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-10-17 10:47:37.451939361 +0000 UTC m=+11.536933812 E1017 10:47:37.462989 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E1017 10:47:37.463089 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 10:47:37.463124 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 10:47:37.463166 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I1017 10:47:37.505376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ql8f5" condition "Approved" to 2026-10-17 10:47:37.505364524 +0000 UTC m=+11.590358945 I1017 10:47:37.521923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ql8f5" condition "Ready" to 2026-10-17 10:47:37.521903428 +0000 UTC m=+11.606897879 I1017 10:47:37.544955 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:47:37.544941291 +0000 UTC m=+11.629935742 I1017 10:47:37.565692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:47:37.566093 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:47:37.566084604 +0000 UTC m=+11.651079055 I1017 10:47:37.567681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:47:37.577049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:47:37.577422 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:47:37.577414816 +0000 UTC m=+11.662409277 I1017 10:47:42.464529 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:47:42.464473063 +0000 UTC m=+16.549467524 I1017 10:48:06.839655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:48:06.839750 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-10-17 10:48:06.83974276 +0000 UTC m=+40.924737221 I1017 10:48:06.839735 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-10-17 10:48:06.839725529 +0000 UTC m=+40.924719961 I1017 10:48:06.856711 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-10-17 10:48:06.856700288 +0000 UTC m=+40.941694719 I1017 10:48:06.866803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:48:06.866864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:48:06.866882 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-10-17 10:48:06.866876422 +0000 UTC m=+40.951870853 I1017 10:48:07.201254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:48:07.215072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z6znt" condition "Approved" to 2026-10-17 10:48:07.215059554 +0000 UTC m=+41.300054005 I1017 10:48:07.251230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z6znt" condition "Ready" to 2026-10-17 10:48:07.251219321 +0000 UTC m=+41.336213752 I1017 10:48:07.285309 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:48:07.28529965 +0000 UTC m=+41.370294081 I1017 10:48:07.313676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:53:05.643207 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-54.nip.io-tls" condition "Ready" to 2026-10-17 10:53:05.643184062 +0000 UTC m=+339.728178493 I1017 10:53:05.643642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-54.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:53:05.643806 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-54.nip.io-tls" condition "Issuing" to 2026-10-17 10:53:05.643719455 +0000 UTC m=+339.728713906 I1017 10:53:05.665616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-54.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-54.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:53:05.665718 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-54.nip.io-tls" condition "Ready" to 2026-10-17 10:53:05.665709308 +0000 UTC m=+339.750703719 I1017 10:53:05.806376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-54.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-54.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:53:05.846596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-54.nip.io-tls-tftdq" condition "Approved" to 2026-10-17 10:53:05.846579235 +0000 UTC m=+339.931573666 I1017 10:53:05.886587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-54.nip.io-tls-tftdq" condition "Ready" to 2026-10-17 10:53:05.886569777 +0000 UTC m=+339.971564228 I1017 10:53:05.921491 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-54.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:53:05.921439738 +0000 UTC m=+340.006434189 I1017 10:53:05.946823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-54.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-54.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:54:12.258423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:54:12.258524 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-10-17 10:54:12.258511396 +0000 UTC m=+406.343505847 I1017 10:54:12.258476 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-10-17 10:54:12.258455034 +0000 UTC m=+406.343449455 E1017 10:54:12.275825 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1017 10:54:12.275932 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-10-17 10:54:12.27591881 +0000 UTC m=+406.360913261 E1017 10:54:12.277183 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1017 10:54:12.278406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:54:12.278701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:54:12.278782 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-10-17 10:54:12.278769216 +0000 UTC m=+406.363763697 E1017 10:54:12.289291 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E1017 10:54:12.289434 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 10:54:12.289484 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 10:54:12.289540 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I1017 10:54:12.330052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:54:12.335162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dmcnz" condition "Approved" to 2026-10-17 10:54:12.335144363 +0000 UTC m=+406.420138814 I1017 10:54:12.350200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dmcnz" condition "Ready" to 2026-10-17 10:54:12.350183032 +0000 UTC m=+406.435177493 I1017 10:54:12.377842 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:54:12.377801134 +0000 UTC m=+406.462795585 I1017 10:54:12.400186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:54:12.400674 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:54:12.400664535 +0000 UTC m=+406.485658966 I1017 10:54:12.415654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:54:12.416120 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:54:12.416085953 +0000 UTC m=+406.501080414 I1017 10:54:12.426870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:54:17.289854 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:54:17.289838088 +0000 UTC m=+411.374832539 I1017 10:55:01.258135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:55:01.258203 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-10-17 10:55:01.258196177 +0000 UTC m=+455.343190608 I1017 10:55:01.264761 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-10-17 10:55:01.264742257 +0000 UTC m=+455.349736678 I1017 10:55:01.266078 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-10-17 10:55:01.266064688 +0000 UTC m=+455.351059119 I1017 10:55:01.266692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:55:01.266710 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-10-17 10:55:01.266707512 +0000 UTC m=+455.351701933 I1017 10:55:01.266846 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-10-17 10:55:01.266840575 +0000 UTC m=+455.351835006 I1017 10:55:01.267143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:55:01.267162 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-10-17 10:55:01.267157933 +0000 UTC m=+455.352152364 I1017 10:55:01.328459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:01.328535 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:55:01.328558 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-10-17 10:55:01.328551841 +0000 UTC m=+455.413546262 I1017 10:55:01.330342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:01.330420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:01.330511 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-10-17 10:55:01.330503276 +0000 UTC m=+455.415497697 I1017 10:55:01.330611 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-10-17 10:55:01.330602008 +0000 UTC m=+455.415596429 I1017 10:55:01.473382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:01.503660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lg5lp" condition "Approved" to 2026-10-17 10:55:01.503645657 +0000 UTC m=+455.588640088 I1017 10:55:01.519550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lg5lp" condition "Ready" to 2026-10-17 10:55:01.519538791 +0000 UTC m=+455.604533212 I1017 10:55:01.534651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:01.600357 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:01.600343934 +0000 UTC m=+455.685338355 I1017 10:55:01.624159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rdbdv" condition "Approved" to 2026-10-17 10:55:01.624145321 +0000 UTC m=+455.709139732 I1017 10:55:01.639731 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:01.639712987 +0000 UTC m=+455.724707408 I1017 10:55:01.648884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:01.656413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:01.658261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rdbdv" condition "Ready" to 2026-10-17 10:55:01.658249103 +0000 UTC m=+455.743243514 I1017 10:55:01.685650 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:01.685636301 +0000 UTC m=+455.770630722 I1017 10:55:01.721308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:01.721621 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:01.721614926 +0000 UTC m=+455.806609347 I1017 10:55:01.895800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:02.143807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mrmnb" condition "Approved" to 2026-10-17 10:55:02.143788328 +0000 UTC m=+456.228782759 I1017 10:55:02.482439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mrmnb" condition "Ready" to 2026-10-17 10:55:02.482425133 +0000 UTC m=+456.567419554 I1017 10:55:02.692728 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:02.692709855 +0000 UTC m=+456.777704276 I1017 10:55:02.793257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:02.793869 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:02.793852934 +0000 UTC m=+456.878847385 I1017 10:55:03.040780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:03.096196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:09.566829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:55:09.566865 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" condition "Issuing" to 2026-10-17 10:55:09.566857585 +0000 UTC m=+463.651852006 I1017 10:55:09.567677 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" condition "Ready" to 2026-10-17 10:55:09.567672284 +0000 UTC m=+463.652666705 I1017 10:55:09.584054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:09.584104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:55:09.584116 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" condition "Issuing" to 2026-10-17 10:55:09.58411328 +0000 UTC m=+463.669107701 I1017 10:55:10.299149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zgw4f-hk9sg" condition "Approved" to 2026-10-17 10:55:10.299136873 +0000 UTC m=+464.384131294 I1017 10:55:10.300299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:10.416760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zgw4f-hk9sg" condition "Ready" to 2026-10-17 10:55:10.416744766 +0000 UTC m=+464.501739217 I1017 10:55:10.460160 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:10.460142859 +0000 UTC m=+464.545137290 I1017 10:55:10.479995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zgw4f-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:22.830444 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-10-17 10:55:22.830426257 +0000 UTC m=+476.915420688 I1017 10:55:22.830962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:55:22.831012 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-10-17 10:55:22.83100325 +0000 UTC m=+476.915997671 I1017 10:55:22.848370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:22.848441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:55:22.848461 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-10-17 10:55:22.848454859 +0000 UTC m=+476.933449280 I1017 10:55:23.152057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:23.164854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2htzn" condition "Approved" to 2026-10-17 10:55:23.164837746 +0000 UTC m=+477.249832177 I1017 10:55:23.197871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2htzn" condition "Ready" to 2026-10-17 10:55:23.197862921 +0000 UTC m=+477.282857342 I1017 10:55:23.233386 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:23.233368692 +0000 UTC m=+477.318363113 I1017 10:55:23.257096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:23.257645 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:23.257637697 +0000 UTC m=+477.342632118 I1017 10:55:23.283027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:55:23.283354 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:55:23.283345454 +0000 UTC m=+477.368339875 I1017 10:55:23.284965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:58:41.646887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:58:41.647423 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-10-17 10:58:41.646979871 +0000 UTC m=+675.731974302 I1017 10:58:41.647919 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-10-17 10:58:41.646680843 +0000 UTC m=+675.731675294 I1017 10:58:41.669062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:58:41.669207 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-10-17 10:58:41.669193853 +0000 UTC m=+675.754188304 I1017 10:58:41.775088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:58:41.811039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dkqtb" condition "Approved" to 2026-10-17 10:58:41.811025028 +0000 UTC m=+675.896019449 I1017 10:58:41.838852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dkqtb" condition "Ready" to 2026-10-17 10:58:41.838837397 +0000 UTC m=+675.923831818 I1017 10:58:41.868472 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:58:41.868461199 +0000 UTC m=+675.953455620 I1017 10:58:41.893837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:59:35.001306 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-10-17 10:59:35.00128357 +0000 UTC m=+729.086278051 I1017 10:59:35.001470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:59:35.005815 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-10-17 10:59:35.005796999 +0000 UTC m=+729.090791510 I1017 10:59:35.031875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:59:35.031956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:59:35.031980 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-10-17 10:59:35.031971257 +0000 UTC m=+729.116965678 I1017 10:59:35.235351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:59:35.246196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zv5bs" condition "Approved" to 2026-10-17 10:59:35.246182105 +0000 UTC m=+729.331176516 I1017 10:59:35.270827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zv5bs" condition "Ready" to 2026-10-17 10:59:35.27081695 +0000 UTC m=+729.355811361 I1017 10:59:35.314729 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:59:35.314712716 +0000 UTC m=+729.399707147 I1017 10:59:35.332759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:59:35.387499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"