I1026 21:20:08.771791 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I1026 21:20:08.771946 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W1026 21:20:08.772051 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I1026 21:20:08.776519 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I1026 21:20:08.777009 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I1026 21:20:08.777143 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I1026 21:20:08.777168 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I1026 21:20:08.781048 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I1026 21:20:08.798209 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I1026 21:20:08.801768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I1026 21:20:08.801792 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I1026 21:20:08.801801 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I1026 21:20:08.801966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I1026 21:20:08.806702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I1026 21:20:08.811358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I1026 21:20:08.815194 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I1026 21:20:08.818908 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I1026 21:20:08.823110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I1026 21:20:08.827133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I1026 21:20:08.830573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I1026 21:20:08.832966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I1026 21:20:08.839870 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I1026 21:20:08.839963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I1026 21:20:08.844102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I1026 21:20:08.848037 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I1026 21:20:08.851666 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I1026 21:20:08.855667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I1026 21:20:08.859710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I1026 21:20:08.863453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I1026 21:20:08.867307 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I1026 21:20:08.867354 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I1026 21:20:08.867464 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I1026 21:20:08.873071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I1026 21:20:08.876105 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.877848 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.878427 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.906544 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.931869 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.952018 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.962633 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.976813 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.988891 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:08.994118 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I1026 21:20:21.654845 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-10-26 21:20:21.654834528 +0000 UTC m=+12.917008715 I1026 21:20:22.309898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:20:22.309952 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-10-26 21:20:22.309940374 +0000 UTC m=+13.572114591 I1026 21:20:22.310360 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-10-26 21:20:22.310343087 +0000 UTC m=+13.572517294 E1026 21:20:22.326997 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1026 21:20:22.327068 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-10-26 21:20:22.327060236 +0000 UTC m=+13.589234443 E1026 21:20:22.327098 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1026 21:20:22.330828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:20:22.330897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:20:22.330915 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-10-26 21:20:22.330908627 +0000 UTC m=+13.593082844 E1026 21:20:22.336269 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E1026 21:20:22.336362 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1026 21:20:22.336383 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1026 21:20:22.336434 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I1026 21:20:22.379464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-t99ln" condition "Approved" to 2026-10-26 21:20:22.379450133 +0000 UTC m=+13.641624340 I1026 21:20:22.396680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-t99ln" condition "Ready" to 2026-10-26 21:20:22.396666158 +0000 UTC m=+13.658840365 I1026 21:20:22.419650 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:20:22.419635894 +0000 UTC m=+13.681810091 I1026 21:20:22.437501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:20:22.438210 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:20:22.438204223 +0000 UTC m=+13.700378400 I1026 21:20:22.457866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:20:22.459986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:20:22.460309 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:20:22.460302722 +0000 UTC m=+13.722476899 I1026 21:20:27.336866 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:20:27.336849484 +0000 UTC m=+18.599023691 I1026 21:20:52.226093 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-10-26 21:20:52.22603574 +0000 UTC m=+43.488209927 I1026 21:20:52.226189 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:20:52.226321 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-10-26 21:20:52.226313669 +0000 UTC m=+43.488487856 I1026 21:20:52.247275 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-10-26 21:20:52.247260792 +0000 UTC m=+43.509434979 I1026 21:20:52.257078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:20:52.257372 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-10-26 21:20:52.25726226 +0000 UTC m=+43.519436447 I1026 21:20:52.775795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:20:52.815125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tj8gs" condition "Approved" to 2026-10-26 21:20:52.815115563 +0000 UTC m=+44.077289740 I1026 21:20:52.850040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tj8gs" condition "Ready" to 2026-10-26 21:20:52.850030589 +0000 UTC m=+44.112204766 I1026 21:20:52.878331 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:20:52.878319525 +0000 UTC m=+44.140493702 I1026 21:20:52.903013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:25:39.973605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:25:39.973667 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-113.nip.io-tls" condition "Issuing" to 2026-10-26 21:25:39.973636932 +0000 UTC m=+331.235811139 I1026 21:25:39.973598 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-113.nip.io-tls" condition "Ready" to 2026-10-26 21:25:39.9735787 +0000 UTC m=+331.235752907 I1026 21:25:39.997718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:25:39.997779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:25:39.997799 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-113.nip.io-tls" condition "Issuing" to 2026-10-26 21:25:39.997792758 +0000 UTC m=+331.259966975 I1026 21:25:40.195146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:25:40.205711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-113.nip.io-tls-f778f" condition "Approved" to 2026-10-26 21:25:40.205701186 +0000 UTC m=+331.467875403 I1026 21:25:40.238119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-113.nip.io-tls-f778f" condition "Ready" to 2026-10-26 21:25:40.238104659 +0000 UTC m=+331.500278876 I1026 21:25:40.268972 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:25:40.268953908 +0000 UTC m=+331.531128115 I1026 21:25:40.288843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:25:40.289218 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:25:40.289209401 +0000 UTC m=+331.551383618 I1026 21:25:40.307392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:25:40.307696 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:25:40.307688204 +0000 UTC m=+331.569862381 I1026 21:25:40.312887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:26:47.209376 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-10-26 21:26:47.209357667 +0000 UTC m=+398.471531884 I1026 21:26:47.209857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:26:47.209871 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-10-26 21:26:47.209868062 +0000 UTC m=+398.472042239 E1026 21:26:47.225451 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1026 21:26:47.225489 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-10-26 21:26:47.225481321 +0000 UTC m=+398.487655508 E1026 21:26:47.225549 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1026 21:26:47.227346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:26:47.227529 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-10-26 21:26:47.227492291 +0000 UTC m=+398.489666498 E1026 21:26:47.238799 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E1026 21:26:47.238954 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1026 21:26:47.239014 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1026 21:26:47.239102 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I1026 21:26:47.320013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:26:47.342138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zvv6s" condition "Approved" to 2026-10-26 21:26:47.342122967 +0000 UTC m=+398.604297144 I1026 21:26:47.354814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zvv6s" condition "Ready" to 2026-10-26 21:26:47.35480355 +0000 UTC m=+398.616977737 I1026 21:26:47.373076 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:26:47.373060537 +0000 UTC m=+398.635234724 I1026 21:26:47.389930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:26:52.239360 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:26:52.239350415 +0000 UTC m=+403.501524592 I1026 21:27:36.015497 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-10-26 21:27:36.015487217 +0000 UTC m=+447.277661394 I1026 21:27:36.015843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:27:36.015900 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-10-26 21:27:36.015891959 +0000 UTC m=+447.278066156 I1026 21:27:36.040167 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-10-26 21:27:36.040156028 +0000 UTC m=+447.302330205 I1026 21:27:36.040175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:27:36.040376 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-10-26 21:27:36.040372064 +0000 UTC m=+447.302546241 I1026 21:27:36.045001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:27:36.045029 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-10-26 21:27:36.045022823 +0000 UTC m=+447.307197000 I1026 21:27:36.046329 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-10-26 21:27:36.04631638 +0000 UTC m=+447.308490557 I1026 21:27:36.095358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:36.095446 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-10-26 21:27:36.095439407 +0000 UTC m=+447.357613574 I1026 21:27:36.121860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:36.121927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:27:36.121948 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-10-26 21:27:36.121942681 +0000 UTC m=+447.384116858 I1026 21:27:36.156881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:36.156973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:27:36.156999 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-10-26 21:27:36.156993441 +0000 UTC m=+447.419167608 I1026 21:27:36.333562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xtgcm" condition "Approved" to 2026-10-26 21:27:36.333551843 +0000 UTC m=+447.595726030 I1026 21:27:36.353615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jbn4s" condition "Approved" to 2026-10-26 21:27:36.353606867 +0000 UTC m=+447.615781044 I1026 21:27:36.364364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xtgcm" condition "Ready" to 2026-10-26 21:27:36.364358646 +0000 UTC m=+447.626532823 I1026 21:27:36.373789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jbn4s" condition "Ready" to 2026-10-26 21:27:36.373774105 +0000 UTC m=+447.635948302 I1026 21:27:36.391587 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:27:36.391566822 +0000 UTC m=+447.653740999 I1026 21:27:36.399901 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:27:36.399897379 +0000 UTC m=+447.662071556 I1026 21:27:36.404983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:36.413039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:36.419119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:36.428056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ljj2v" condition "Approved" to 2026-10-26 21:27:36.428040543 +0000 UTC m=+447.690214720 I1026 21:27:36.881705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ljj2v" condition "Ready" to 2026-10-26 21:27:36.881693167 +0000 UTC m=+448.143867344 I1026 21:27:37.345585 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:27:37.345570357 +0000 UTC m=+448.607744534 I1026 21:27:37.447710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:37.545654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:37.546291 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:27:37.546280796 +0000 UTC m=+448.808455003 I1026 21:27:37.592860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:37.797360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:47.042795 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls" condition "Ready" to 2026-10-26 21:27:47.042772889 +0000 UTC m=+458.304947076 I1026 21:27:47.043174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:27:47.043202 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls" condition "Issuing" to 2026-10-26 21:27:47.043195762 +0000 UTC m=+458.305369949 I1026 21:27:47.068401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:27:47.068631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:27:47.068728 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls" condition "Issuing" to 2026-10-26 21:27:47.068714629 +0000 UTC m=+458.330888846 I1026 21:27:47.210445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h8j7k-d56rr" condition "Approved" to 2026-10-26 21:27:47.210431765 +0000 UTC m=+458.472605952 I1026 21:27:47.245929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h8j7k-d56rr" condition "Ready" to 2026-10-26 21:27:47.245912088 +0000 UTC m=+458.508086265 I1026 21:27:47.277792 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:27:47.277772574 +0000 UTC m=+458.539946761 I1026 21:27:47.297551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h8j7k-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:28:01.767172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:28:01.767202 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-10-26 21:28:01.76719515 +0000 UTC m=+473.029369327 I1026 21:28:01.767676 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-10-26 21:28:01.767666204 +0000 UTC m=+473.029840381 I1026 21:28:01.795210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:28:01.795307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:28:01.795332 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-10-26 21:28:01.795324567 +0000 UTC m=+473.057498744 I1026 21:28:02.042874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6gxb4" condition "Approved" to 2026-10-26 21:28:02.042863687 +0000 UTC m=+473.305037864 I1026 21:28:02.064578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6gxb4" condition "Ready" to 2026-10-26 21:28:02.064569173 +0000 UTC m=+473.326743350 I1026 21:28:02.101361 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:28:02.101348397 +0000 UTC m=+473.363522574 I1026 21:28:02.125194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:31:27.167089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:31:27.167110 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-10-26 21:31:27.167098892 +0000 UTC m=+678.429273079 I1026 21:31:27.167130 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-10-26 21:31:27.167122543 +0000 UTC m=+678.429296750 I1026 21:31:27.190194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:31:27.190281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:31:27.190486 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-10-26 21:31:27.190477789 +0000 UTC m=+678.452651986 I1026 21:31:27.396143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q8qv8" condition "Approved" to 2026-10-26 21:31:27.396125028 +0000 UTC m=+678.658299235 I1026 21:31:27.420905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q8qv8" condition "Ready" to 2026-10-26 21:31:27.420894529 +0000 UTC m=+678.683068706 I1026 21:31:27.460049 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:31:27.460031071 +0000 UTC m=+678.722205278 I1026 21:31:27.481344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:31:27.524489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:32:12.349604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:32:12.349677 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-10-26 21:32:12.349668143 +0000 UTC m=+723.611842350 I1026 21:32:12.349986 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-10-26 21:32:12.34996728 +0000 UTC m=+723.612141477 I1026 21:32:12.368402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:32:12.368480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1026 21:32:12.368516 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-10-26 21:32:12.368510068 +0000 UTC m=+723.630684245 I1026 21:32:12.577722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8h5lr" condition "Approved" to 2026-10-26 21:32:12.577707553 +0000 UTC m=+723.839881760 I1026 21:32:12.614418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8h5lr" condition "Ready" to 2026-10-26 21:32:12.614409509 +0000 UTC m=+723.876583686 I1026 21:32:12.643060 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:32:12.643049805 +0000 UTC m=+723.905223982 I1026 21:32:12.677651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:32:12.680238 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:32:12.680228953 +0000 UTC m=+723.942403140 I1026 21:32:12.681561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:32:12.698042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1026 21:32:12.698462 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-26 21:32:12.698453563 +0000 UTC m=+723.960627740