I0822 14:35:52.719225 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0822 14:35:52.719321 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0822 14:35:52.719416 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0822 14:35:52.726611 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0822 14:35:52.727185 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0822 14:35:52.727289 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0822 14:35:52.727510 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0822 14:35:52.732146 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0822 14:35:52.745016 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0822 14:35:52.749366 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0822 14:35:52.749397 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0822 14:35:52.749556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0822 14:35:52.753845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0822 14:35:52.761281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0822 14:35:52.763575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0822 14:35:52.765907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0822 14:35:52.768542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0822 14:35:52.771086 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0822 14:35:52.771116 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0822 14:35:52.771125 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0822 14:35:52.771255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0822 14:35:52.773231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0822 14:35:52.775472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0822 14:35:52.778323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0822 14:35:52.782848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0822 14:35:52.786599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0822 14:35:52.788760 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0822 14:35:52.791171 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0822 14:35:52.791267 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0822 14:35:52.793841 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0822 14:35:52.796197 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0822 14:35:52.798122 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0822 14:35:52.800174 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0822 14:35:52.802037 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.803706 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.804714 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.804981 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.821589 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.835411 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.852491 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.872290 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.883610 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:35:52.890505 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0822 14:36:04.246195 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-22 14:36:04.246172354 +0000 UTC m=+11.556998250 I0822 14:36:05.026259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:36:05.026305 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-22 14:36:05.026298152 +0000 UTC m=+12.337124018 I0822 14:36:05.026350 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 14:36:05.026331453 +0000 UTC m=+12.337157319 E0822 14:36:05.038962 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 14:36:05.039063 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-22 14:36:05.039053888 +0000 UTC m=+12.349879754 E0822 14:36:05.039151 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 14:36:05.040783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:05.040832 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 14:36:05.040827221 +0000 UTC m=+12.351653087 E0822 14:36:05.061440 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0822 14:36:05.061566 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 14:36:05.061601 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 14:36:05.061629 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0822 14:36:05.067222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:05.089303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nsjnn" condition "Approved" to 2026-08-22 14:36:05.089287088 +0000 UTC m=+12.400112994 I0822 14:36:05.101978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nsjnn" condition "Ready" to 2026-08-22 14:36:05.10196482 +0000 UTC m=+12.412790676 I0822 14:36:05.124554 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:36:05.124543072 +0000 UTC m=+12.435368958 I0822 14:36:05.145562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:05.146621 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:36:05.146606611 +0000 UTC m=+12.457432477 I0822 14:36:05.148510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:05.175321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:05.175538 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:36:05.175532163 +0000 UTC m=+12.486358019 I0822 14:36:10.062214 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:36:10.062194607 +0000 UTC m=+17.373020493 I0822 14:36:31.167615 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-22 14:36:31.167538231 +0000 UTC m=+38.478364097 I0822 14:36:31.167606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:36:31.167759 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-22 14:36:31.167752369 +0000 UTC m=+38.478578225 I0822 14:36:31.180822 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-22 14:36:31.180804166 +0000 UTC m=+38.491630032 I0822 14:36:31.189336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:31.189388 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-22 14:36:31.189383786 +0000 UTC m=+38.500209642 I0822 14:36:31.404018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:31.437461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qfgbb" condition "Approved" to 2026-08-22 14:36:31.437448611 +0000 UTC m=+38.748274477 I0822 14:36:31.468308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qfgbb" condition "Ready" to 2026-08-22 14:36:31.468288735 +0000 UTC m=+38.779114611 I0822 14:36:31.501192 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:36:31.501179795 +0000 UTC m=+38.812005651 I0822 14:36:31.527984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:31.528264 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:36:31.52825845 +0000 UTC m=+38.839084316 I0822 14:36:31.536434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:36:31.556889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:40:33.537304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:40:33.537349 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-08-22 14:40:33.537341002 +0000 UTC m=+280.848166898 I0822 14:40:33.537299 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-08-22 14:40:33.536791506 +0000 UTC m=+280.847617372 I0822 14:40:33.558393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:40:33.558632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:40:33.558677 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-08-22 14:40:33.55866419 +0000 UTC m=+280.869490076 I0822 14:40:33.964666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:40:33.971274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-dv5qr" condition "Approved" to 2026-08-22 14:40:33.97125827 +0000 UTC m=+281.282084156 I0822 14:40:33.995283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-dv5qr" condition "Ready" to 2026-08-22 14:40:33.995269657 +0000 UTC m=+281.306095523 I0822 14:40:34.024734 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:40:34.024706244 +0000 UTC m=+281.335532140 I0822 14:40:34.047319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:40:34.047665 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:40:34.0476567 +0000 UTC m=+281.358482566 I0822 14:40:34.064942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:41:43.124670 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-22 14:41:43.124622264 +0000 UTC m=+350.435448150 I0822 14:41:43.124987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:41:43.125067 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-22 14:41:43.125043977 +0000 UTC m=+350.435869863 E0822 14:41:43.141921 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 14:41:43.141993 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-22 14:41:43.141978352 +0000 UTC m=+350.452804248 E0822 14:41:43.142353 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 14:41:43.146272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:41:43.146536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:41:43.146579 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-22 14:41:43.146562182 +0000 UTC m=+350.457388048 E0822 14:41:43.161294 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0822 14:41:43.161501 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 14:41:43.161555 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 14:41:43.161592 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0822 14:41:43.204985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:41:43.209028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ll8c4" condition "Approved" to 2026-08-22 14:41:43.20901954 +0000 UTC m=+350.519845396 I0822 14:41:43.221495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ll8c4" condition "Ready" to 2026-08-22 14:41:43.22148515 +0000 UTC m=+350.532311016 I0822 14:41:43.241558 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:41:43.241527886 +0000 UTC m=+350.552353752 I0822 14:41:43.259146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:41:43.310368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:41:48.162645 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:41:48.162623937 +0000 UTC m=+355.473449823 I0822 14:42:31.120095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:31.120131 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 14:42:31.120123597 +0000 UTC m=+398.430949453 I0822 14:42:31.120530 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-22 14:42:31.120526251 +0000 UTC m=+398.431352107 I0822 14:42:31.120800 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:31.120828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:31.136152 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 14:42:31.136129186 +0000 UTC m=+398.446955042 I0822 14:42:31.120832 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-22 14:42:31.120825271 +0000 UTC m=+398.431651117 I0822 14:42:31.120798 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-22 14:42:31.12079465 +0000 UTC m=+398.431620506 I0822 14:42:31.120859 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-22 14:42:31.120856863 +0000 UTC m=+398.431682719 I0822 14:42:31.150112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:31.150296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:31.151350 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 14:42:31.151331806 +0000 UTC m=+398.462157662 I0822 14:42:31.169044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:31.171529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:31.176592 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-22 14:42:31.171557348 +0000 UTC m=+398.482383214 I0822 14:42:31.181585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:31.181733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:31.181763 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 14:42:31.181755617 +0000 UTC m=+398.492581483 I0822 14:42:31.384486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2tpgw" condition "Approved" to 2026-08-22 14:42:31.384472976 +0000 UTC m=+398.695298842 I0822 14:42:31.392544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:31.403553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9bp9l" condition "Approved" to 2026-08-22 14:42:31.403527799 +0000 UTC m=+398.714353675 I0822 14:42:31.412193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2tpgw" condition "Ready" to 2026-08-22 14:42:31.412180545 +0000 UTC m=+398.723006401 I0822 14:42:31.431830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9bp9l" condition "Ready" to 2026-08-22 14:42:31.431803537 +0000 UTC m=+398.742629383 I0822 14:42:31.469216 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:42:31.469204527 +0000 UTC m=+398.780030383 I0822 14:42:31.482902 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:42:31.482884925 +0000 UTC m=+398.793710791 I0822 14:42:31.490814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m9vh9" condition "Approved" to 2026-08-22 14:42:31.490801156 +0000 UTC m=+398.801627002 I0822 14:42:31.507805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:31.511095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:31.511417 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:42:31.511410572 +0000 UTC m=+398.822236418 I0822 14:42:31.545953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m9vh9" condition "Ready" to 2026-08-22 14:42:31.545936414 +0000 UTC m=+398.856762280 I0822 14:42:32.190077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:32.298285 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:42:32.298273425 +0000 UTC m=+399.609099281 I0822 14:42:32.538496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:32.689825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:41.056383 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" condition "Ready" to 2026-08-22 14:42:41.056363837 +0000 UTC m=+408.367189703 I0822 14:42:41.056806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:41.056835 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" condition "Issuing" to 2026-08-22 14:42:41.056816463 +0000 UTC m=+408.367642329 I0822 14:42:41.071761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:41.071811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:41.071822 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" condition "Issuing" to 2026-08-22 14:42:41.07181796 +0000 UTC m=+408.382643826 I0822 14:42:41.646915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lz5gg-s8bm6" condition "Approved" to 2026-08-22 14:42:41.646898533 +0000 UTC m=+408.957724389 I0822 14:42:41.681639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lz5gg-s8bm6" condition "Ready" to 2026-08-22 14:42:41.681628829 +0000 UTC m=+408.992454685 I0822 14:42:41.713173 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:42:41.713160637 +0000 UTC m=+409.023986493 I0822 14:42:41.736880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:41.737144 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:42:41.737137233 +0000 UTC m=+409.047963089 I0822 14:42:41.813818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:41.816228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lz5gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:52.425276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:42:52.425316 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-22 14:42:52.425306435 +0000 UTC m=+419.736132301 I0822 14:42:52.425936 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 14:42:52.425930367 +0000 UTC m=+419.736756223 I0822 14:42:52.462430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:52.462552 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 14:42:52.462540997 +0000 UTC m=+419.773366903 I0822 14:42:52.882261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:52.912172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gjnsq" condition "Approved" to 2026-08-22 14:42:52.912159603 +0000 UTC m=+420.222985459 I0822 14:42:52.931075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gjnsq" condition "Ready" to 2026-08-22 14:42:52.93104708 +0000 UTC m=+420.241872946 I0822 14:42:52.967641 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:42:52.967626609 +0000 UTC m=+420.278452465 I0822 14:42:52.987683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:42:52.988113 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:42:52.988104801 +0000 UTC m=+420.298930667 I0822 14:42:53.010167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:46:02.959796 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-22 14:46:02.959774872 +0000 UTC m=+610.270600738 I0822 14:46:02.960196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:46:02.960303 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 14:46:02.960291653 +0000 UTC m=+610.271117539 I0822 14:46:02.988357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:46:02.988414 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-22 14:46:02.988409322 +0000 UTC m=+610.299235178 I0822 14:46:03.063153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:46:03.104575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6qlls" condition "Approved" to 2026-08-22 14:46:03.104546399 +0000 UTC m=+610.415372315 I0822 14:46:03.127633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6qlls" condition "Ready" to 2026-08-22 14:46:03.127623272 +0000 UTC m=+610.438449128 I0822 14:46:03.168123 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:46:03.168110028 +0000 UTC m=+610.478935884 I0822 14:46:03.201707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:46:03.202068 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:46:03.202059242 +0000 UTC m=+610.512885138 I0822 14:46:42.149169 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-22 14:46:42.149150627 +0000 UTC m=+649.459976523 I0822 14:46:42.149767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:46:42.149800 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 14:46:42.14979336 +0000 UTC m=+649.460619256 I0822 14:46:42.175939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:46:42.176138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 14:46:42.176195 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 14:46:42.176186835 +0000 UTC m=+649.487012701 I0822 14:46:42.416323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jckhk" condition "Approved" to 2026-08-22 14:46:42.416307517 +0000 UTC m=+649.727133373 I0822 14:46:42.434496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jckhk" condition "Ready" to 2026-08-22 14:46:42.43448435 +0000 UTC m=+649.745310216 I0822 14:46:42.460429 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:46:42.45996281 +0000 UTC m=+649.770788676 I0822 14:46:42.487566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:46:42.487931 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:46:42.487923564 +0000 UTC m=+649.798749430 I0822 14:46:42.505175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 14:46:42.505559 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 14:46:42.505550474 +0000 UTC m=+649.816376340