I0922 03:39:55.532763 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0922 03:39:55.532886 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0922 03:39:55.533027 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0922 03:39:55.538121 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0922 03:39:55.538674 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0922 03:39:55.538805 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0922 03:39:55.538937 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0922 03:39:55.542863 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0922 03:39:55.557362 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0922 03:39:55.562982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0922 03:39:55.567102 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0922 03:39:55.567199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0922 03:39:55.572436 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0922 03:39:55.579452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0922 03:39:55.584700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0922 03:39:55.589838 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0922 03:39:55.589893 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0922 03:39:55.595068 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0922 03:39:55.598465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0922 03:39:55.601823 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0922 03:39:55.605283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0922 03:39:55.611645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0922 03:39:55.615535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0922 03:39:55.619426 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0922 03:39:55.619461 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0922 03:39:55.619479 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0922 03:39:55.619492 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0922 03:39:55.619600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0922 03:39:55.623620 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0922 03:39:55.627426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0922 03:39:55.631335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0922 03:39:55.637147 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0922 03:39:55.639696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0922 03:39:55.644328 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.646727 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.647808 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.649478 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.672229 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.703002 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.718411 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.730087 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.752898 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:39:55.765579 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 03:40:07.045985 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-22 03:40:07.045973825 +0000 UTC m=+11.544950261 I0922 03:40:07.722375 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-22 03:40:07.722365506 +0000 UTC m=+12.221341942 I0922 03:40:07.722637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:40:07.722722 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-22 03:40:07.722711772 +0000 UTC m=+12.221688238 E0922 03:40:07.738242 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 03:40:07.738295 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-22 03:40:07.73829002 +0000 UTC m=+12.237266456 E0922 03:40:07.738327 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 03:40:07.744575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:07.744664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:40:07.744739 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-22 03:40:07.744727531 +0000 UTC m=+12.243704007 E0922 03:40:07.756897 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0922 03:40:07.756997 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 03:40:07.758695 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 03:40:07.758790 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0922 03:40:07.791284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6tfgl" condition "Approved" to 2026-09-22 03:40:07.791270874 +0000 UTC m=+12.290247340 I0922 03:40:07.793567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:07.805565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6tfgl" condition "Ready" to 2026-09-22 03:40:07.805550798 +0000 UTC m=+12.304527264 I0922 03:40:07.833959 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:40:07.833947945 +0000 UTC m=+12.332924391 I0922 03:40:07.853884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:07.854137 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:40:07.854132591 +0000 UTC m=+12.353109027 I0922 03:40:07.874216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:07.877785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:12.758107 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:40:12.758047891 +0000 UTC m=+17.257024357 I0922 03:40:35.332867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:40:35.332927 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-22 03:40:35.332920118 +0000 UTC m=+39.831896564 I0922 03:40:35.333198 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-22 03:40:35.333187822 +0000 UTC m=+39.832164258 I0922 03:40:35.363350 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-22 03:40:35.363340802 +0000 UTC m=+39.862317248 I0922 03:40:35.369495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:35.369576 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-22 03:40:35.369569827 +0000 UTC m=+39.868546263 I0922 03:40:35.630598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:35.661614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wchdx" condition "Approved" to 2026-09-22 03:40:35.661602424 +0000 UTC m=+40.160578870 I0922 03:40:35.694961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wchdx" condition "Ready" to 2026-09-22 03:40:35.694952733 +0000 UTC m=+40.193929169 I0922 03:40:35.723432 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:40:35.723424557 +0000 UTC m=+40.222400993 I0922 03:40:35.744552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:35.745096 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:40:35.745088858 +0000 UTC m=+40.244065304 I0922 03:40:35.768948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:40:35.769210 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:40:35.769204656 +0000 UTC m=+40.268181092 I0922 03:45:21.692813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-217.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:45:21.692903 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-217.nip.io-tls" condition "Issuing" to 2026-09-22 03:45:21.692894267 +0000 UTC m=+326.191870733 I0922 03:45:21.692981 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-217.nip.io-tls" condition "Ready" to 2026-09-22 03:45:21.692948848 +0000 UTC m=+326.191925324 I0922 03:45:21.718023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-217.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-217.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:45:21.718156 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-217.nip.io-tls" condition "Ready" to 2026-09-22 03:45:21.718141435 +0000 UTC m=+326.217117911 I0922 03:45:21.829254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-217.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-217.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:45:21.861432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-217.nip.io-tls-9b8tq" condition "Approved" to 2026-09-22 03:45:21.86142174 +0000 UTC m=+326.360398186 I0922 03:45:21.892970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-217.nip.io-tls-9b8tq" condition "Ready" to 2026-09-22 03:45:21.892960018 +0000 UTC m=+326.391936454 I0922 03:45:21.915901 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-217.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:45:21.915888992 +0000 UTC m=+326.414865428 I0922 03:45:21.936704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-217.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-217.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:45:21.937126 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-217.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:45:21.937119955 +0000 UTC m=+326.436096391 I0922 03:45:21.957937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-217.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-217.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:45:21.958257 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-217.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:45:21.958245325 +0000 UTC m=+326.457221761 I0922 03:46:31.404773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:46:31.404816 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-22 03:46:31.404806113 +0000 UTC m=+395.903782579 I0922 03:46:31.404936 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 03:46:31.404920365 +0000 UTC m=+395.903896811 E0922 03:46:31.423114 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 03:46:31.423165 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-22 03:46:31.423155564 +0000 UTC m=+395.922132030 E0922 03:46:31.423457 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 03:46:31.426751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:46:31.426913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:46:31.427004 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-22 03:46:31.426994236 +0000 UTC m=+395.925970702 E0922 03:46:31.435307 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0922 03:46:31.435580 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 03:46:31.435695 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 03:46:31.435771 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0922 03:46:31.466809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:46:31.472225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zkhsp" condition "Approved" to 2026-09-22 03:46:31.472214603 +0000 UTC m=+395.971191049 I0922 03:46:31.495425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zkhsp" condition "Ready" to 2026-09-22 03:46:31.495410601 +0000 UTC m=+395.994387067 I0922 03:46:31.523821 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:46:31.523806661 +0000 UTC m=+396.022783127 I0922 03:46:31.542935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:46:36.436712 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:46:36.436698888 +0000 UTC m=+400.935675364 I0922 03:47:17.118613 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-22 03:47:17.118598351 +0000 UTC m=+441.617574797 I0922 03:47:17.119085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:47:17.119150 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-22 03:47:17.119144099 +0000 UTC m=+441.618120525 I0922 03:47:17.132794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:47:17.132824 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-22 03:47:17.132817309 +0000 UTC m=+441.631793755 I0922 03:47:17.133099 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-22 03:47:17.133093363 +0000 UTC m=+441.632069809 I0922 03:47:17.133390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:47:17.133408 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-22 03:47:17.133404778 +0000 UTC m=+441.632381224 I0922 03:47:17.133629 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-22 03:47:17.133624712 +0000 UTC m=+441.632601158 I0922 03:47:17.177406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.177751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.179059 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-22 03:47:17.179051884 +0000 UTC m=+441.678028310 I0922 03:47:17.179036 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-22 03:47:17.179023134 +0000 UTC m=+441.677999560 I0922 03:47:17.179811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.179852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:47:17.179864 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-22 03:47:17.179861886 +0000 UTC m=+441.678838322 I0922 03:47:17.360452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.399670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-phlr5" condition "Approved" to 2026-09-22 03:47:17.399656514 +0000 UTC m=+441.898632950 I0922 03:47:17.413316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.423592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-phlr5" condition "Ready" to 2026-09-22 03:47:17.423583772 +0000 UTC m=+441.922560208 I0922 03:47:17.430521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wgg47" condition "Approved" to 2026-09-22 03:47:17.430511374 +0000 UTC m=+441.929487810 I0922 03:47:17.461850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wgg47" condition "Ready" to 2026-09-22 03:47:17.461842071 +0000 UTC m=+441.960818507 I0922 03:47:17.469688 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:17.469683396 +0000 UTC m=+441.968659832 I0922 03:47:17.503823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.505186 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:17.505179343 +0000 UTC m=+442.004155779 I0922 03:47:17.592892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.593176 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:17.593171668 +0000 UTC m=+442.092148104 I0922 03:47:17.708850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.910723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:17.953550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:18.115887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-crbj8" condition "Approved" to 2026-09-22 03:47:18.115874522 +0000 UTC m=+442.614850958 I0922 03:47:18.214507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-crbj8" condition "Ready" to 2026-09-22 03:47:18.214491319 +0000 UTC m=+442.713467785 I0922 03:47:18.656391 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:18.656375638 +0000 UTC m=+443.155352084 I0922 03:47:18.761238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:18.761666 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:18.761655802 +0000 UTC m=+443.260632278 I0922 03:47:18.955039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:25.261502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:47:25.261530 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls" condition "Issuing" to 2026-09-22 03:47:25.261523573 +0000 UTC m=+449.760500009 I0922 03:47:25.261574 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls" condition "Ready" to 2026-09-22 03:47:25.261559513 +0000 UTC m=+449.760535959 I0922 03:47:25.276706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:25.276767 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls" condition "Ready" to 2026-09-22 03:47:25.276761952 +0000 UTC m=+449.775738388 I0922 03:47:25.597018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:25.632497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lwz8m-qt86k" condition "Approved" to 2026-09-22 03:47:25.63248631 +0000 UTC m=+450.131462756 I0922 03:47:25.651599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lwz8m-qt86k" condition "Ready" to 2026-09-22 03:47:25.651589255 +0000 UTC m=+450.150565701 I0922 03:47:25.682745 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:25.682728034 +0000 UTC m=+450.181704500 I0922 03:47:25.705799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lwz8m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:39.324305 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-22 03:47:39.324286756 +0000 UTC m=+463.823263192 I0922 03:47:39.324442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:47:39.324468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-22 03:47:39.324461189 +0000 UTC m=+463.823437625 I0922 03:47:39.334911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:39.334960 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:47:39.334982 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-22 03:47:39.334976078 +0000 UTC m=+463.833952514 I0922 03:47:39.481950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:39.496504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d5d4b" condition "Approved" to 2026-09-22 03:47:39.496493149 +0000 UTC m=+463.995469595 I0922 03:47:39.517124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d5d4b" condition "Ready" to 2026-09-22 03:47:39.517116091 +0000 UTC m=+464.016092527 I0922 03:47:39.561842 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:39.561828172 +0000 UTC m=+464.060804618 I0922 03:47:39.585443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:39.585781 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:39.58577415 +0000 UTC m=+464.084750576 I0922 03:47:39.614996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:47:39.616121 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:47:39.616112679 +0000 UTC m=+464.115089125 I0922 03:51:06.777639 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-22 03:51:06.777622385 +0000 UTC m=+671.276598841 I0922 03:51:06.778089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:51:06.778148 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-22 03:51:06.778138641 +0000 UTC m=+671.277115107 I0922 03:51:06.798007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:51:06.798106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:51:06.798126 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-22 03:51:06.798120164 +0000 UTC m=+671.297096610 I0922 03:51:07.049101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9v785" condition "Approved" to 2026-09-22 03:51:07.049088121 +0000 UTC m=+671.548064587 I0922 03:51:07.069155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9v785" condition "Ready" to 2026-09-22 03:51:07.069143085 +0000 UTC m=+671.568119551 I0922 03:51:07.105576 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:51:07.105564027 +0000 UTC m=+671.604540463 I0922 03:51:07.134756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:51:07.135265 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:51:07.135254448 +0000 UTC m=+671.634230924 I0922 03:51:07.155408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:51:48.104555 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-22 03:51:48.104539353 +0000 UTC m=+712.603515809 I0922 03:51:48.104986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 03:51:48.105153 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-22 03:51:48.10510873 +0000 UTC m=+712.604085196 I0922 03:51:48.136515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:51:48.136822 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-22 03:51:48.136812121 +0000 UTC m=+712.635788587 I0922 03:51:48.325463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 03:51:48.356529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zqhl9" condition "Approved" to 2026-09-22 03:51:48.356520378 +0000 UTC m=+712.855496814 I0922 03:51:48.375775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zqhl9" condition "Ready" to 2026-09-22 03:51:48.375763949 +0000 UTC m=+712.874740385 I0922 03:51:48.401148 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 03:51:48.401139264 +0000 UTC m=+712.900115700 I0922 03:51:48.420905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"