I0810 22:23:52.293724 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0810 22:23:52.293874 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0810 22:23:52.293949 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0810 22:23:52.299860 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0810 22:23:52.300536 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0810 22:23:52.300587 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0810 22:23:52.300637 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0810 22:23:52.307606 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0810 22:23:52.321974 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0810 22:23:52.326707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0810 22:23:52.329983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0810 22:23:52.332658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0810 22:23:52.335533 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0810 22:23:52.335863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0810 22:23:52.340372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0810 22:23:52.345056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0810 22:23:52.348532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0810 22:23:52.351313 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0810 22:23:52.353772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0810 22:23:52.355417 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0810 22:23:52.355451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0810 22:23:52.357418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0810 22:23:52.359112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0810 22:23:52.361668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0810 22:23:52.366049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0810 22:23:52.369070 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0810 22:23:52.369101 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0810 22:23:52.369139 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0810 22:23:52.372297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0810 22:23:52.374171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0810 22:23:52.375793 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0810 22:23:52.375846 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0810 22:23:52.376582 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0810 22:23:52.378610 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.379478 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.379918 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.380250 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.381433 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.380427 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.381756 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.380650 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.381958 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:23:52.456659 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0810 22:24:11.246384 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-10 22:24:11.246362971 +0000 UTC m=+18.987092860 I0810 22:24:11.984838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:24:11.984895 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-10 22:24:11.984887579 +0000 UTC m=+19.725617468 I0810 22:24:11.985172 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-10 22:24:11.985161474 +0000 UTC m=+19.725891383 E0810 22:24:11.998156 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0810 22:24:11.998253 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-10 22:24:11.998242241 +0000 UTC m=+19.738972150 E0810 22:24:11.998296 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0810 22:24:12.003808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:24:12.003884 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-10 22:24:12.003877509 +0000 UTC m=+19.744607378 E0810 22:24:12.017096 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0810 22:24:12.017248 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0810 22:24:12.017299 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0810 22:24:12.017350 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0810 22:24:12.020733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:24:12.041949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v4fxd" condition "Approved" to 2026-08-10 22:24:12.041937437 +0000 UTC m=+19.782667326 I0810 22:24:12.056058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v4fxd" condition "Ready" to 2026-08-10 22:24:12.056047373 +0000 UTC m=+19.796777262 I0810 22:24:12.086026 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:24:12.08601326 +0000 UTC m=+19.826743139 I0810 22:24:12.114713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:24:12.115191 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:24:12.115180772 +0000 UTC m=+19.855910691 I0810 22:24:12.133843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:24:12.135327 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:24:12.135310503 +0000 UTC m=+19.876040392 I0810 22:24:17.017719 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:24:17.017705058 +0000 UTC m=+24.758434937 I0810 22:24:42.322092 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-10 22:24:42.322056756 +0000 UTC m=+50.062786635 I0810 22:24:42.322548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:24:42.322589 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-10 22:24:42.322584765 +0000 UTC m=+50.063314644 I0810 22:24:42.336470 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-10 22:24:42.336460415 +0000 UTC m=+50.077190294 I0810 22:24:42.343910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:24:42.344308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:24:42.344335 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-10 22:24:42.344329137 +0000 UTC m=+50.085059016 I0810 22:24:42.629207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-swzgs" condition "Approved" to 2026-08-10 22:24:42.629196381 +0000 UTC m=+50.369926270 I0810 22:24:42.660433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-swzgs" condition "Ready" to 2026-08-10 22:24:42.660415212 +0000 UTC m=+50.401145091 I0810 22:24:42.693201 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:24:42.693188112 +0000 UTC m=+50.433917991 I0810 22:24:42.723579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:24:42.723786 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:24:42.723780873 +0000 UTC m=+50.464510752 I0810 22:24:42.750530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:29:54.294444 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-08-10 22:29:54.294429052 +0000 UTC m=+362.035158931 I0810 22:29:54.295018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:29:54.295360 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-08-10 22:29:54.295342851 +0000 UTC m=+362.036072730 I0810 22:29:54.311706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:29:54.311778 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-08-10 22:29:54.311771249 +0000 UTC m=+362.052501128 I0810 22:29:54.541245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:29:54.569731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-ggksz" condition "Approved" to 2026-08-10 22:29:54.569715426 +0000 UTC m=+362.310445315 I0810 22:29:54.604503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-ggksz" condition "Ready" to 2026-08-10 22:29:54.604491101 +0000 UTC m=+362.345220990 I0810 22:29:54.631170 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:29:54.631158726 +0000 UTC m=+362.371888615 I0810 22:29:54.656086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:29:54.656465 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:29:54.656456951 +0000 UTC m=+362.397186860 I0810 22:29:54.677280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:01.209237 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-10 22:31:01.209208933 +0000 UTC m=+428.949938822 I0810 22:31:01.209256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:31:01.209341 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-10 22:31:01.209330306 +0000 UTC m=+428.950060215 E0810 22:31:01.225562 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0810 22:31:01.225731 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-10 22:31:01.225696987 +0000 UTC m=+428.966426866 E0810 22:31:01.225785 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0810 22:31:01.232562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:01.232662 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-10 22:31:01.232654569 +0000 UTC m=+428.973384458 E0810 22:31:01.239063 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0810 22:31:01.239614 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0810 22:31:01.239648 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0810 22:31:01.239693 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0810 22:31:01.247114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:01.247196 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-10 22:31:01.247188775 +0000 UTC m=+428.987918664 I0810 22:31:01.251596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:01.251871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2s69k" condition "Approved" to 2026-08-10 22:31:01.251862303 +0000 UTC m=+428.992592182 I0810 22:31:01.259356 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-10 22:31:01.259346446 +0000 UTC m=+429.000076335 I0810 22:31:01.262792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2s69k" condition "Ready" to 2026-08-10 22:31:01.262781771 +0000 UTC m=+429.003511650 I0810 22:31:01.268409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:01.291064 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:31:01.291050748 +0000 UTC m=+429.031780637 I0810 22:31:01.312388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:06.239602 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:31:06.239579817 +0000 UTC m=+433.980309736 I0810 22:31:51.504054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:31:51.504119 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-10 22:31:51.504080098 +0000 UTC m=+479.244809977 I0810 22:31:51.506774 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-10 22:31:51.506761016 +0000 UTC m=+479.247490955 I0810 22:31:51.557693 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:31:51.557727 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-10 22:31:51.557720023 +0000 UTC m=+479.298449912 I0810 22:31:51.558143 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-10 22:31:51.55813721 +0000 UTC m=+479.298867099 I0810 22:31:51.565647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:51.565694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:31:51.565715 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-10 22:31:51.565709416 +0000 UTC m=+479.306439305 I0810 22:31:51.566023 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-10 22:31:51.566018231 +0000 UTC m=+479.306748120 I0810 22:31:51.566208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:31:51.566227 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-10 22:31:51.566223565 +0000 UTC m=+479.306953454 I0810 22:31:51.597457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:51.597963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:31:51.597999 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-10 22:31:51.597991816 +0000 UTC m=+479.338721705 I0810 22:31:51.598245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:51.598465 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-10 22:31:51.598453155 +0000 UTC m=+479.339183054 I0810 22:31:51.998129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5t9c4" condition "Approved" to 2026-08-10 22:31:51.998116139 +0000 UTC m=+479.738846028 I0810 22:31:52.017898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5t9c4" condition "Ready" to 2026-08-10 22:31:52.017882924 +0000 UTC m=+479.758612843 I0810 22:31:52.048462 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:31:52.048452013 +0000 UTC m=+479.789181902 I0810 22:31:52.062175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:52.065108 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:31:52.065100402 +0000 UTC m=+479.805830291 I0810 22:31:52.113268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:52.147315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:52.183320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-95r24" condition "Approved" to 2026-08-10 22:31:52.183311355 +0000 UTC m=+479.924041234 I0810 22:31:52.194373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6t9jt" condition "Approved" to 2026-08-10 22:31:52.194294152 +0000 UTC m=+479.935024031 I0810 22:31:52.197798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-95r24" condition "Ready" to 2026-08-10 22:31:52.197790015 +0000 UTC m=+479.938519894 I0810 22:31:52.209385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6t9jt" condition "Ready" to 2026-08-10 22:31:52.209363413 +0000 UTC m=+479.950093322 I0810 22:31:52.574374 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:31:52.574358978 +0000 UTC m=+480.315088857 I0810 22:31:52.612155 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:31:52.612146617 +0000 UTC m=+480.352876496 I0810 22:31:52.647208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:52.647814 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:31:52.647803557 +0000 UTC m=+480.388533476 I0810 22:31:52.849079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:52.849675 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:31:52.849666832 +0000 UTC m=+480.590396721 I0810 22:31:53.169365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:31:53.178708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:32:08.100461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:32:08.100502 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" condition "Issuing" to 2026-08-10 22:32:08.100493476 +0000 UTC m=+495.841223365 I0810 22:32:08.100669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" condition "Ready" to 2026-08-10 22:32:08.100656349 +0000 UTC m=+495.841386238 I0810 22:32:08.428781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:32:08.429121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:32:08.429216 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" condition "Issuing" to 2026-08-10 22:32:08.4292056 +0000 UTC m=+496.169935509 I0810 22:32:08.815624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5z7tn-sb99r" condition "Approved" to 2026-08-10 22:32:08.815611663 +0000 UTC m=+496.556341562 I0810 22:32:08.844473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5z7tn-sb99r" condition "Ready" to 2026-08-10 22:32:08.844464924 +0000 UTC m=+496.585194793 I0810 22:32:09.955586 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:32:09.9555641 +0000 UTC m=+497.696294019 I0810 22:32:10.582211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:32:10.582465 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:32:10.582459166 +0000 UTC m=+498.323189045 I0810 22:32:12.251407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:32:12.251555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5z7tn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:32:44.767796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:32:44.767859 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-10 22:32:44.767825137 +0000 UTC m=+532.508555026 I0810 22:32:44.769468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-10 22:32:44.769418964 +0000 UTC m=+532.510148863 I0810 22:32:44.791195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:32:44.791309 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-10 22:32:44.791303142 +0000 UTC m=+532.532033021 I0810 22:32:44.957959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:32:45.173112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2k8hz" condition "Approved" to 2026-08-10 22:32:45.173100418 +0000 UTC m=+532.913830307 I0810 22:32:45.198351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2k8hz" condition "Ready" to 2026-08-10 22:32:45.198343173 +0000 UTC m=+532.939073042 I0810 22:32:45.226035 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:32:45.226020691 +0000 UTC m=+532.966750580 I0810 22:32:45.246696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:32:45.309182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:35:35.601608 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:35:35.601660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-10 22:35:35.601640235 +0000 UTC m=+703.342370124 I0810 22:35:35.602110 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-10 22:35:35.60210249 +0000 UTC m=+703.342832379 I0810 22:35:35.625035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:35:35.625076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:35:35.625088 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-10 22:35:35.625083165 +0000 UTC m=+703.365813044 I0810 22:35:35.962788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rnrhs" condition "Approved" to 2026-08-10 22:35:35.962775485 +0000 UTC m=+703.703505374 I0810 22:35:35.981618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rnrhs" condition "Ready" to 2026-08-10 22:35:35.981603895 +0000 UTC m=+703.722333824 I0810 22:35:36.010416 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:35:36.010406228 +0000 UTC m=+703.751136107 I0810 22:35:36.032577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:35:36.033021 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:35:36.033012109 +0000 UTC m=+703.773741998 I0810 22:35:36.051572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:36:16.803263 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-10 22:36:16.803243569 +0000 UTC m=+744.543973478 I0810 22:36:16.803808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:36:16.804342 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-10 22:36:16.804331441 +0000 UTC m=+744.545061410 I0810 22:36:16.824870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0810 22:36:16.824914 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0810 22:36:16.824927 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-10 22:36:16.824922083 +0000 UTC m=+744.565651962 I0810 22:36:17.153798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-s65jt" condition "Approved" to 2026-08-10 22:36:17.153786758 +0000 UTC m=+744.894516637 I0810 22:36:17.173482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-s65jt" condition "Ready" to 2026-08-10 22:36:17.173471322 +0000 UTC m=+744.914201221 I0810 22:36:17.198857 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-10 22:36:17.198846238 +0000 UTC m=+744.939576117 I0810 22:36:17.223004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"