I0819 09:03:09.056291 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0819 09:03:09.056459 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0819 09:03:09.056582 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0819 09:03:09.064424 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0819 09:03:09.064726 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0819 09:03:09.064835 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0819 09:03:09.064937 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0819 09:03:09.066571 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0819 09:03:09.079069 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0819 09:03:09.085618 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0819 09:03:09.088641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0819 09:03:09.092723 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0819 09:03:09.092742 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0819 09:03:09.092839 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0819 09:03:09.094777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0819 09:03:09.096342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0819 09:03:09.097872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0819 09:03:09.099646 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0819 09:03:09.101297 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0819 09:03:09.101314 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0819 09:03:09.101389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0819 09:03:09.103465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0819 09:03:09.108005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0819 09:03:09.109555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0819 09:03:09.111496 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0819 09:03:09.113053 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0819 09:03:09.113099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0819 09:03:09.114940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0819 09:03:09.116935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0819 09:03:09.121368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0819 09:03:09.124864 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0819 09:03:09.124910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0819 09:03:09.127447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0819 09:03:09.132587 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.132666 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.133308 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.147373 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.162057 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.182720 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.191959 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.209132 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.229555 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:09.230105 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:03:26.321259 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-19 09:03:26.321233253 +0000 UTC m=+17.300556715 I0819 09:03:27.012996 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-19 09:03:27.012980282 +0000 UTC m=+17.992303774 I0819 09:03:27.013123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:03:27.013186 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-19 09:03:27.013176177 +0000 UTC m=+17.992499669 E0819 09:03:27.032510 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:03:27.032668 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-19 09:03:27.0326552 +0000 UTC m=+18.011978682 E0819 09:03:27.033088 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:03:27.034108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:27.034370 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-19 09:03:27.034331525 +0000 UTC m=+18.013654987 E0819 09:03:27.043320 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0819 09:03:27.043704 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:03:27.043783 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:03:27.043849 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0819 09:03:27.048732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:27.067003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gg859" condition "Approved" to 2026-08-19 09:03:27.066995955 +0000 UTC m=+18.046319417 I0819 09:03:27.077551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gg859" condition "Ready" to 2026-08-19 09:03:27.07753988 +0000 UTC m=+18.056863342 I0819 09:03:27.097075 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:27.097066177 +0000 UTC m=+18.076389639 I0819 09:03:27.112861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:27.113087 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:27.113080652 +0000 UTC m=+18.092404114 I0819 09:03:27.131470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:32.044381 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:32.044367633 +0000 UTC m=+23.023691115 I0819 09:03:53.550066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:03:53.550194 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-19 09:03:53.550166213 +0000 UTC m=+44.529489665 I0819 09:03:53.550495 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-19 09:03:53.550480809 +0000 UTC m=+44.529804291 I0819 09:03:53.564327 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-19 09:03:53.564314852 +0000 UTC m=+44.543638324 I0819 09:03:53.594581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:53.594760 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-19 09:03:53.594753499 +0000 UTC m=+44.574076951 I0819 09:03:53.765662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:53.801921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rx2tp" condition "Approved" to 2026-08-19 09:03:53.801904614 +0000 UTC m=+44.781228076 I0819 09:03:53.836406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rx2tp" condition "Ready" to 2026-08-19 09:03:53.836393725 +0000 UTC m=+44.815717187 I0819 09:03:53.866284 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:53.866270035 +0000 UTC m=+44.845593497 I0819 09:03:53.898229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:53.898487 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:53.898480878 +0000 UTC m=+44.877804340 I0819 09:03:53.905893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:53.923799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:03:53.924007 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:03:53.924001347 +0000 UTC m=+44.903324789 I0819 09:08:00.473570 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Ready" to 2026-08-19 09:08:00.47347849 +0000 UTC m=+291.452801972 I0819 09:08:00.474148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:08:00.474189 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Issuing" to 2026-08-19 09:08:00.474178786 +0000 UTC m=+291.453502248 I0819 09:08:00.490865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:00.491085 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Ready" to 2026-08-19 09:08:00.491074265 +0000 UTC m=+291.470397727 I0819 09:08:00.582633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:00.617705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-235.nip.io-tls-rpj2c" condition "Approved" to 2026-08-19 09:08:00.617684699 +0000 UTC m=+291.597008171 I0819 09:08:00.657814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-235.nip.io-tls-rpj2c" condition "Ready" to 2026-08-19 09:08:00.657802455 +0000 UTC m=+291.637125917 I0819 09:08:00.685440 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:08:00.685425854 +0000 UTC m=+291.664749316 I0819 09:08:00.718476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:00.718892 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:08:00.718885146 +0000 UTC m=+291.698208608 I0819 09:08:00.742475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:05.253886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:05.253909 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-19 09:09:05.253870345 +0000 UTC m=+356.233193827 I0819 09:09:05.253940 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-19 09:09:05.253927968 +0000 UTC m=+356.233251460 I0819 09:09:05.269635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:05.269713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:05.269740 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-19 09:09:05.269734165 +0000 UTC m=+356.249057617 E0819 09:09:05.273362 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:09:05.273400 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-19 09:09:05.273391991 +0000 UTC m=+356.252715453 E0819 09:09:05.273452 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:09:05.286459 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0819 09:09:05.287076 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:09:05.287117 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:09:05.287206 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0819 09:09:05.302292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:05.305376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5ml76" condition "Approved" to 2026-08-19 09:09:05.305362074 +0000 UTC m=+356.284685566 I0819 09:09:05.316381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5ml76" condition "Ready" to 2026-08-19 09:09:05.316373697 +0000 UTC m=+356.295697159 I0819 09:09:05.334719 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:05.334707083 +0000 UTC m=+356.314030555 I0819 09:09:05.352020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:05.390226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:10.287303 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:10.287284632 +0000 UTC m=+361.266608174 I0819 09:09:51.151546 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-19 09:09:51.151506439 +0000 UTC m=+402.130829901 I0819 09:09:51.152317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:51.152352 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-19 09:09:51.152348073 +0000 UTC m=+402.131671535 I0819 09:09:51.165051 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-19 09:09:51.165037206 +0000 UTC m=+402.144360678 I0819 09:09:51.165414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:51.165438 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-19 09:09:51.165433481 +0000 UTC m=+402.144756933 I0819 09:09:51.170740 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-19 09:09:51.170733357 +0000 UTC m=+402.150056809 I0819 09:09:51.182065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:51.182094 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-19 09:09:51.182088886 +0000 UTC m=+402.161412338 I0819 09:09:51.214145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:51.214207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:51.214406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:51.214519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:51.214538 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-19 09:09:51.214533641 +0000 UTC m=+402.193857093 I0819 09:09:51.214776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:51.214789 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-19 09:09:51.214786876 +0000 UTC m=+402.194110318 I0819 09:09:51.215054 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-19 09:09:51.215050613 +0000 UTC m=+402.194374065 I0819 09:09:51.375479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:51.409783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:51.414955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t5l4z" condition "Approved" to 2026-08-19 09:09:51.4149447 +0000 UTC m=+402.394268162 I0819 09:09:51.417643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-j5f2w" condition "Approved" to 2026-08-19 09:09:51.41763228 +0000 UTC m=+402.396955742 I0819 09:09:51.427382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:51.440877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t5l4z" condition "Ready" to 2026-08-19 09:09:51.440866912 +0000 UTC m=+402.420190364 I0819 09:09:51.442186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sskc7" condition "Approved" to 2026-08-19 09:09:51.442173594 +0000 UTC m=+402.421497076 I0819 09:09:51.442300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-j5f2w" condition "Ready" to 2026-08-19 09:09:51.442291052 +0000 UTC m=+402.421614504 I0819 09:09:51.507007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-sskc7" condition "Ready" to 2026-08-19 09:09:51.506988508 +0000 UTC m=+402.486311960 I0819 09:09:51.707012 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:51.706998774 +0000 UTC m=+402.686322226 I0819 09:09:51.727041 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:51.727030632 +0000 UTC m=+402.706354074 I0819 09:09:51.939099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:51.939634 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:51.939623633 +0000 UTC m=+402.918947125 I0819 09:09:52.037866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:52.038239 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:52.038233159 +0000 UTC m=+403.017556611 I0819 09:09:52.093654 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:52.093640252 +0000 UTC m=+403.072963714 I0819 09:09:52.493004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:52.493451 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:52.493443686 +0000 UTC m=+403.472767138 I0819 09:09:52.590330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:52.643320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:52.938839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:59.284807 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:59.285108 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" condition "Issuing" to 2026-08-19 09:09:59.285094262 +0000 UTC m=+410.264417754 I0819 09:09:59.284960 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" condition "Ready" to 2026-08-19 09:09:59.284933912 +0000 UTC m=+410.264257374 I0819 09:09:59.303832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:59.303900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:09:59.303914 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" condition "Issuing" to 2026-08-19 09:09:59.303909394 +0000 UTC m=+410.283232846 I0819 09:09:59.474326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gz7pr-sf49b" condition "Approved" to 2026-08-19 09:09:59.474315261 +0000 UTC m=+410.453638703 I0819 09:09:59.495368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gz7pr-sf49b" condition "Ready" to 2026-08-19 09:09:59.495359886 +0000 UTC m=+410.474683338 I0819 09:09:59.528004 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:09:59.527995321 +0000 UTC m=+410.507318783 I0819 09:09:59.546141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:09:59.607049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gz7pr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:10.894439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:10:10.894481 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-19 09:10:10.8944677 +0000 UTC m=+421.873791162 I0819 09:10:10.895068 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-19 09:10:10.895039997 +0000 UTC m=+421.874363479 I0819 09:10:10.920836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:10.920911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-19 09:10:10.920904928 +0000 UTC m=+421.900228380 I0819 09:10:11.116579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:10:11.150944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v2fjq" condition "Approved" to 2026-08-19 09:10:11.150927611 +0000 UTC m=+422.130251083 I0819 09:10:11.170139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v2fjq" condition "Ready" to 2026-08-19 09:10:11.170125383 +0000 UTC m=+422.149448845 I0819 09:10:11.205120 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:10:11.205101006 +0000 UTC m=+422.184424498 I0819 09:10:11.224717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:13:16.087322 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-19 09:13:16.087290203 +0000 UTC m=+607.066613655 I0819 09:13:16.087408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:13:16.087792 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-19 09:13:16.087712292 +0000 UTC m=+607.067035834 I0819 09:13:16.102160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:13:16.102277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:13:16.102338 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-19 09:13:16.102330887 +0000 UTC m=+607.081654349 I0819 09:13:16.377912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9n92k" condition "Approved" to 2026-08-19 09:13:16.377893866 +0000 UTC m=+607.357217358 I0819 09:13:16.399462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9n92k" condition "Ready" to 2026-08-19 09:13:16.399453353 +0000 UTC m=+607.378776805 I0819 09:13:16.436102 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:13:16.436079484 +0000 UTC m=+607.415402926 I0819 09:13:16.452308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:13:16.501846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:13:54.256672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:13:54.256784 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-19 09:13:54.256773457 +0000 UTC m=+645.236096949 I0819 09:13:54.257176 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-19 09:13:54.257169642 +0000 UTC m=+645.236493114 I0819 09:13:54.274844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:13:54.275008 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-19 09:13:54.27499956 +0000 UTC m=+645.254323022 I0819 09:13:54.604136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:13:54.635225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-d4zn4" condition "Approved" to 2026-08-19 09:13:54.635214437 +0000 UTC m=+645.614537899 I0819 09:13:54.651513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-d4zn4" condition "Ready" to 2026-08-19 09:13:54.651504735 +0000 UTC m=+645.630828197 I0819 09:13:54.673745 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:13:54.673736789 +0000 UTC m=+645.653060231 I0819 09:13:54.706570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"