I0918 02:24:12.308172 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0918 02:24:12.308332 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 02:24:12.308458 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 02:24:12.313339 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 02:24:12.313940 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0918 02:24:12.314035 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 02:24:12.314043 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 02:24:12.317846 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 02:24:12.333682 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 02:24:12.340753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 02:24:12.347521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 02:24:12.361409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 02:24:12.365443 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 02:24:12.365492 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 02:24:12.369055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 02:24:12.371897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 02:24:12.374859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 02:24:12.386581 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 02:24:12.392138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 02:24:12.396628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 02:24:12.400950 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 02:24:12.401000 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 02:24:12.401020 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 02:24:12.401139 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 02:24:12.405350 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 02:24:12.405541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 02:24:12.409741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 02:24:12.413818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 02:24:12.417882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 02:24:12.421454 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 02:24:12.421545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 02:24:12.429677 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 02:24:12.434995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0918 02:24:12.437457 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.438010 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.439067 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.440545 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.467956 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.492481 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.510516 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.526855 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.538902 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:12.547951 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:23.461617 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 02:24:23.461574388 +0000 UTC m=+11.194915311 I0918 02:24:24.167849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:24:24.167896 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 02:24:24.167885151 +0000 UTC m=+11.901226064 I0918 02:24:24.168193 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 02:24:24.168181836 +0000 UTC m=+11.901522749 E0918 02:24:24.187617 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:24:24.187673 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 02:24:24.187662898 +0000 UTC m=+11.921003821 E0918 02:24:24.187710 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:24:24.193613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:24.193874 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 02:24:24.193859116 +0000 UTC m=+11.927200029 E0918 02:24:24.209228 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0918 02:24:24.209504 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:24:24.209658 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:24:24.209806 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 02:24:24.218057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:24.249862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-d6hmg" condition "Approved" to 2026-09-18 02:24:24.249842543 +0000 UTC m=+11.983183456 I0918 02:24:24.270167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-d6hmg" condition "Ready" to 2026-09-18 02:24:24.270151859 +0000 UTC m=+12.003492762 I0918 02:24:24.297714 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:24.297700506 +0000 UTC m=+12.031041409 I0918 02:24:24.323460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:24.323722 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:24.323716981 +0000 UTC m=+12.057057864 I0918 02:24:24.337483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:24.354366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:29.210688 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:29.210631859 +0000 UTC m=+16.943972782 I0918 02:24:57.051018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:24:57.051056 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 02:24:57.051048219 +0000 UTC m=+44.784389112 I0918 02:24:57.051729 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 02:24:57.051703988 +0000 UTC m=+44.785044881 I0918 02:24:57.072805 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 02:24:57.072787959 +0000 UTC m=+44.806128882 I0918 02:24:57.078183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:57.078243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:24:57.078266 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 02:24:57.0782595 +0000 UTC m=+44.811600393 I0918 02:24:57.406798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bwlhd" condition "Approved" to 2026-09-18 02:24:57.406788373 +0000 UTC m=+45.140129256 I0918 02:24:57.456218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bwlhd" condition "Ready" to 2026-09-18 02:24:57.456207729 +0000 UTC m=+45.189548622 I0918 02:24:57.485447 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:57.485406815 +0000 UTC m=+45.218747718 I0918 02:24:57.511847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:57.512149 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:57.51214154 +0000 UTC m=+45.245482433 I0918 02:24:57.537008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:57.539558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:57.540273 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:57.540262862 +0000 UTC m=+45.273603765 I0918 02:30:45.314055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-107.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:30:45.314158 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-107.nip.io-tls" condition "Issuing" to 2026-09-18 02:30:45.314095331 +0000 UTC m=+393.047436244 I0918 02:30:45.314839 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-107.nip.io-tls" condition "Ready" to 2026-09-18 02:30:45.314828577 +0000 UTC m=+393.048169490 I0918 02:30:45.343883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-107.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-107.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:45.344001 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-107.nip.io-tls" condition "Ready" to 2026-09-18 02:30:45.343987559 +0000 UTC m=+393.077328472 I0918 02:30:45.520134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-107.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-107.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:45.561757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-107.nip.io-tls-nlsfk" condition "Approved" to 2026-09-18 02:30:45.561746912 +0000 UTC m=+393.295087795 I0918 02:30:45.610745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-107.nip.io-tls-nlsfk" condition "Ready" to 2026-09-18 02:30:45.610732631 +0000 UTC m=+393.344073514 I0918 02:30:45.647574 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-107.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:30:45.647564272 +0000 UTC m=+393.380905155 I0918 02:30:45.685955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-107.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-107.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:45.686295 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-107.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:30:45.686285814 +0000 UTC m=+393.419626707 I0918 02:30:45.703050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-107.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-107.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:45.703307 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-107.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:30:45.703298239 +0000 UTC m=+393.436639132 I0918 02:31:56.525450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:56.525486 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 02:31:56.525476505 +0000 UTC m=+464.258817428 I0918 02:31:56.525966 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 02:31:56.525958235 +0000 UTC m=+464.259299148 E0918 02:31:56.540619 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:31:56.540687 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 02:31:56.540678029 +0000 UTC m=+464.274018942 E0918 02:31:56.540718 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:31:56.544146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:56.544228 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 02:31:56.544220278 +0000 UTC m=+464.277561191 E0918 02:31:56.556558 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0918 02:31:56.557194 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:31:56.557251 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:31:56.557331 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0918 02:31:56.561576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:56.587897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hpklh" condition "Approved" to 2026-09-18 02:31:56.587889286 +0000 UTC m=+464.321230169 I0918 02:31:56.604272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hpklh" condition "Ready" to 2026-09-18 02:31:56.604249393 +0000 UTC m=+464.337590316 I0918 02:31:56.626219 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:56.626199539 +0000 UTC m=+464.359540432 I0918 02:31:56.646868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:56.647303 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:56.647297629 +0000 UTC m=+464.380638512 I0918 02:31:56.656813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:56.666018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:56.666296 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:56.666288037 +0000 UTC m=+464.399628930 I0918 02:32:01.558127 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:01.558106969 +0000 UTC m=+469.291447892 I0918 02:32:42.923462 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 02:32:42.923451622 +0000 UTC m=+510.656792515 I0918 02:32:42.923878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:42.923899 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 02:32:42.923895029 +0000 UTC m=+510.657235912 I0918 02:32:42.932527 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 02:32:42.932517978 +0000 UTC m=+510.665858861 I0918 02:32:42.937453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:42.937505 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 02:32:42.937499079 +0000 UTC m=+510.670839972 I0918 02:32:42.942509 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 02:32:42.94249823 +0000 UTC m=+510.675839103 I0918 02:32:42.947872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:42.948635 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 02:32:42.948628303 +0000 UTC m=+510.681969196 I0918 02:32:42.985020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:42.985102 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 02:32:42.985094793 +0000 UTC m=+510.718435686 I0918 02:32:42.985899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:42.985934 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 02:32:42.985930648 +0000 UTC m=+510.719271541 I0918 02:32:42.986639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:42.986971 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 02:32:42.986958827 +0000 UTC m=+510.720299720 I0918 02:32:43.080927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:43.135078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:43.139555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sgnrm" condition "Approved" to 2026-09-18 02:32:43.139545283 +0000 UTC m=+510.872886166 I0918 02:32:43.157590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sgnrm" condition "Ready" to 2026-09-18 02:32:43.157582014 +0000 UTC m=+510.890922897 I0918 02:32:43.163482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hc9n4" condition "Approved" to 2026-09-18 02:32:43.163473622 +0000 UTC m=+510.896814505 I0918 02:32:43.179265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hc9n4" condition "Ready" to 2026-09-18 02:32:43.179255521 +0000 UTC m=+510.912596394 I0918 02:32:43.184629 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:43.1846207 +0000 UTC m=+510.917961583 I0918 02:32:43.214512 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:43.214504048 +0000 UTC m=+510.947844931 I0918 02:32:43.235678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:43.245707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:43.364226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:43.884078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-znfm4" condition "Approved" to 2026-09-18 02:32:43.884066879 +0000 UTC m=+511.617407772 I0918 02:32:43.919574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:44.130817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-znfm4" condition "Ready" to 2026-09-18 02:32:44.130807529 +0000 UTC m=+511.864148412 I0918 02:32:44.577439 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:44.577425636 +0000 UTC m=+512.310766549 I0918 02:32:44.668522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:44.669015 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:44.669006033 +0000 UTC m=+512.402346926 I0918 02:32:44.895906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:52.015286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:52.015341 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls" condition "Issuing" to 2026-09-18 02:32:52.015318449 +0000 UTC m=+519.748659342 I0918 02:32:52.015477 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls" condition "Ready" to 2026-09-18 02:32:52.015446072 +0000 UTC m=+519.748786945 I0918 02:32:52.033362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:52.033468 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls" condition "Ready" to 2026-09-18 02:32:52.033460648 +0000 UTC m=+519.766801531 I0918 02:32:52.241071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:52.281859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dsjkw-8lr75" condition "Approved" to 2026-09-18 02:32:52.28184609 +0000 UTC m=+520.015186973 I0918 02:32:52.312274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dsjkw-8lr75" condition "Ready" to 2026-09-18 02:32:52.312265563 +0000 UTC m=+520.045606446 I0918 02:32:52.342212 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:52.342195296 +0000 UTC m=+520.075536199 I0918 02:32:52.361139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dsjkw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:06.190358 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 02:33:06.190344364 +0000 UTC m=+533.923685247 I0918 02:33:06.190664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:33:06.190677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 02:33:06.19067428 +0000 UTC m=+533.924015163 I0918 02:33:06.204150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:06.204243 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 02:33:06.204237033 +0000 UTC m=+533.937577916 I0918 02:33:06.497918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:06.539468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lpcjh" condition "Approved" to 2026-09-18 02:33:06.539450113 +0000 UTC m=+534.272791026 I0918 02:33:06.562487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lpcjh" condition "Ready" to 2026-09-18 02:33:06.562477526 +0000 UTC m=+534.295818409 I0918 02:33:06.589447 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:33:06.589433819 +0000 UTC m=+534.322774702 I0918 02:33:06.611372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:06.611756 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:33:06.611751349 +0000 UTC m=+534.345092232 I0918 02:33:06.626810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:06.628621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:26.442658 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 02:36:26.442641243 +0000 UTC m=+734.175982156 I0918 02:36:26.442695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:36:26.443441 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 02:36:26.443431581 +0000 UTC m=+734.176772474 I0918 02:36:26.467597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:26.467873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:36:26.467970 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 02:36:26.467897144 +0000 UTC m=+734.201238057 I0918 02:36:27.074723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-st6xm" condition "Approved" to 2026-09-18 02:36:27.074711145 +0000 UTC m=+734.808052018 I0918 02:36:27.079884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:27.103905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-st6xm" condition "Ready" to 2026-09-18 02:36:27.103894674 +0000 UTC m=+734.837235557 I0918 02:36:27.134805 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:36:27.134796552 +0000 UTC m=+734.868137425 I0918 02:36:27.159296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:27.212195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:37:07.371957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:37:07.372053 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 02:37:07.372009688 +0000 UTC m=+775.105350571 I0918 02:37:07.372753 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 02:37:07.372002487 +0000 UTC m=+775.105343390 I0918 02:37:07.397946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:37:07.398026 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 02:37:07.398019801 +0000 UTC m=+775.131360684 I0918 02:37:07.543431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:37:07.575595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8qdk6" condition "Approved" to 2026-09-18 02:37:07.575584827 +0000 UTC m=+775.308925710 I0918 02:37:07.596487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8qdk6" condition "Ready" to 2026-09-18 02:37:07.596476353 +0000 UTC m=+775.329817246 I0918 02:37:07.627609 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:37:07.627600165 +0000 UTC m=+775.360941048 I0918 02:37:07.650471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"