I0812 10:56:23.407191 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0812 10:56:23.407467 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0812 10:56:23.407628 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 10:56:23.412423 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0812 10:56:23.412872 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0812 10:56:23.412893 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0812 10:56:23.413051 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0812 10:56:23.416458 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 10:56:23.434776 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0812 10:56:23.438440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0812 10:56:23.441946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0812 10:56:23.446928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0812 10:56:23.449382 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0812 10:56:23.449406 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0812 10:56:23.449416 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0812 10:56:23.449664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0812 10:56:23.452328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0812 10:56:23.454961 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0812 10:56:23.457246 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0812 10:56:23.459871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0812 10:56:23.460797 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0812 10:56:23.460881 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0812 10:56:23.464106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0812 10:56:23.467687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0812 10:56:23.471551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0812 10:56:23.474745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0812 10:56:23.476966 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0812 10:56:23.477002 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0812 10:56:23.479343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0812 10:56:23.481393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0812 10:56:23.483431 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0812 10:56:23.483570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0812 10:56:23.485286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0812 10:56:23.490580 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.491426 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.494347 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.509468 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.525640 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.544443 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.558239 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.574039 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.579660 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:23.588923 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 10:56:37.528782 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-12 10:56:37.528748343 +0000 UTC m=+14.165612849 I0812 10:56:38.276794 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-12 10:56:38.276779554 +0000 UTC m=+14.913644060 I0812 10:56:38.277100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 10:56:38.277149 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 10:56:38.27714117 +0000 UTC m=+14.914005656 I0812 10:56:38.293997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:56:38.294067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 10:56:38.294083 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 10:56:38.294076814 +0000 UTC m=+14.930941310 E0812 10:56:38.297157 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 10:56:38.297300 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-12 10:56:38.297252557 +0000 UTC m=+14.934117093 E0812 10:56:38.297407 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 10:56:38.309271 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0812 10:56:38.309399 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 10:56:38.309442 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 10:56:38.309473 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0812 10:56:38.334760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:56:38.342726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gwr22" condition "Approved" to 2026-08-12 10:56:38.342713941 +0000 UTC m=+14.979578427 I0812 10:56:38.361379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gwr22" condition "Ready" to 2026-08-12 10:56:38.361368634 +0000 UTC m=+14.998233130 I0812 10:56:38.385643 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:56:38.385628551 +0000 UTC m=+15.022493047 I0812 10:56:38.411542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:56:38.411866 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:56:38.411859161 +0000 UTC m=+15.048723657 I0812 10:56:38.430350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:56:38.430638 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:56:38.430628916 +0000 UTC m=+15.067493402 I0812 10:56:38.435752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:56:43.309841 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:56:43.309822973 +0000 UTC m=+19.946687499 I0812 10:57:08.268223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 10:57:08.268372 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 10:57:08.268363572 +0000 UTC m=+44.905228068 I0812 10:57:08.268222 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-12 10:57:08.268182209 +0000 UTC m=+44.905046715 I0812 10:57:08.288678 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-12 10:57:08.288666498 +0000 UTC m=+44.925531004 I0812 10:57:08.306774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:57:08.306856 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-12 10:57:08.306847073 +0000 UTC m=+44.943711579 I0812 10:57:08.489169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:57:08.523828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6csdj" condition "Approved" to 2026-08-12 10:57:08.523816095 +0000 UTC m=+45.160680601 I0812 10:57:08.551937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6csdj" condition "Ready" to 2026-08-12 10:57:08.551926835 +0000 UTC m=+45.188791331 I0812 10:57:08.592122 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:57:08.59210366 +0000 UTC m=+45.228968166 I0812 10:57:08.620007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:57:08.620681 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 10:57:08.620669886 +0000 UTC m=+45.257534372 I0812 10:57:08.649825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 10:57:08.671575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:01:39.490398 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-08-12 11:01:39.490358767 +0000 UTC m=+316.127223263 I0812 11:01:39.490961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:01:39.490993 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-08-12 11:01:39.490988682 +0000 UTC m=+316.127853178 I0812 11:01:39.527646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:01:39.528051 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-08-12 11:01:39.528036087 +0000 UTC m=+316.164900663 I0812 11:01:39.623780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:01:39.675964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-qspld" condition "Approved" to 2026-08-12 11:01:39.675936933 +0000 UTC m=+316.312801459 I0812 11:01:39.709246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-qspld" condition "Ready" to 2026-08-12 11:01:39.70923328 +0000 UTC m=+316.346097766 I0812 11:01:39.743495 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:01:39.743482499 +0000 UTC m=+316.380347015 I0812 11:01:39.763350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:02:45.903011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:02:45.903043 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 11:02:45.903036187 +0000 UTC m=+382.539900673 I0812 11:02:45.903517 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-12 11:02:45.903511527 +0000 UTC m=+382.540376013 E0812 11:02:45.917045 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 11:02:45.917085 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-12 11:02:45.917076949 +0000 UTC m=+382.553941455 E0812 11:02:45.917137 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 11:02:45.919863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:02:45.919934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:02:45.919955 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 11:02:45.919949607 +0000 UTC m=+382.556814103 E0812 11:02:45.928325 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0812 11:02:45.928665 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 11:02:45.928855 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 11:02:45.929052 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0812 11:02:45.960769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-494ck" condition "Approved" to 2026-08-12 11:02:45.960754536 +0000 UTC m=+382.597619032 I0812 11:02:45.972491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-494ck" condition "Ready" to 2026-08-12 11:02:45.972479861 +0000 UTC m=+382.609344357 I0812 11:02:46.000355 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:02:46.000342481 +0000 UTC m=+382.637206977 I0812 11:02:46.019870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:02:46.020119 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:02:46.020111667 +0000 UTC m=+382.656976153 I0812 11:02:46.023741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:02:46.036628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:02:46.036772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:02:46.037107 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:02:46.037097987 +0000 UTC m=+382.673962483 I0812 11:02:50.929582 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:02:50.929564445 +0000 UTC m=+387.566428961 I0812 11:03:34.368871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:03:34.368902 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-12 11:03:34.368895706 +0000 UTC m=+431.005760192 I0812 11:03:34.379051 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 11:03:34.379039753 +0000 UTC m=+431.015904239 I0812 11:03:34.395708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:03:34.395741 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-12 11:03:34.39573581 +0000 UTC m=+431.032600316 I0812 11:03:34.396017 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 11:03:34.396012596 +0000 UTC m=+431.032877092 I0812 11:03:34.396302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:03:34.396319 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 11:03:34.396315271 +0000 UTC m=+431.033179757 I0812 11:03:34.396504 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 11:03:34.396499674 +0000 UTC m=+431.033364160 I0812 11:03:34.491862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:34.492891 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 11:03:34.492879678 +0000 UTC m=+431.129744194 I0812 11:03:34.494978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:34.498150 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 11:03:34.498136665 +0000 UTC m=+431.135001151 I0812 11:03:34.501896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:34.501976 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 11:03:34.501968255 +0000 UTC m=+431.138832761 I0812 11:03:34.694675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:34.702355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:34.740803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:34.742363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gb2np" condition "Approved" to 2026-08-12 11:03:34.742350089 +0000 UTC m=+431.379214635 I0812 11:03:34.743393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wc8v8" condition "Approved" to 2026-08-12 11:03:34.743381368 +0000 UTC m=+431.380245864 I0812 11:03:34.778778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gb2np" condition "Ready" to 2026-08-12 11:03:34.778767529 +0000 UTC m=+431.415632015 I0812 11:03:34.784180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wc8v8" condition "Ready" to 2026-08-12 11:03:34.784174708 +0000 UTC m=+431.421039194 I0812 11:03:34.819256 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:34.819246024 +0000 UTC m=+431.456110520 I0812 11:03:34.834640 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:34.834628037 +0000 UTC m=+431.471492533 I0812 11:03:34.856905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:34.857172 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:34.857166442 +0000 UTC m=+431.494030948 I0812 11:03:34.859438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:34.861977 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:34.86197065 +0000 UTC m=+431.498835136 I0812 11:03:35.019990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:35.020548 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:35.020537788 +0000 UTC m=+431.657402314 I0812 11:03:35.126887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:35.175899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:35.276540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:35.581848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k6mwm" condition "Approved" to 2026-08-12 11:03:35.581823761 +0000 UTC m=+432.218688257 I0812 11:03:35.984068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k6mwm" condition "Ready" to 2026-08-12 11:03:35.984057052 +0000 UTC m=+432.620921548 I0812 11:03:36.187293 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-k6mwm" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-hrm62" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0812 11:03:36.318505 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-hrm62\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0812 11:03:36.376695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2hfr9" condition "Approved" to 2026-08-12 11:03:36.376681605 +0000 UTC m=+433.013546101 I0812 11:03:36.681616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2hfr9" condition "Ready" to 2026-08-12 11:03:36.681605688 +0000 UTC m=+433.318470184 I0812 11:03:36.924551 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:36.924539016 +0000 UTC m=+433.561403512 I0812 11:03:37.027886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:37.028385 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:37.02837768 +0000 UTC m=+433.665242176 I0812 11:03:37.227205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:45.817819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:03:45.817845 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls" condition "Ready" to 2026-08-12 11:03:45.817829059 +0000 UTC m=+442.454693555 I0812 11:03:45.817854 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls" condition "Issuing" to 2026-08-12 11:03:45.817846469 +0000 UTC m=+442.454710965 I0812 11:03:45.838886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:45.841949 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls" condition "Ready" to 2026-08-12 11:03:45.841936246 +0000 UTC m=+442.478800802 I0812 11:03:46.034119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:46.067828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kxgxl-m6ldw" condition "Approved" to 2026-08-12 11:03:46.067812784 +0000 UTC m=+442.704677300 I0812 11:03:46.107332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kxgxl-m6ldw" condition "Ready" to 2026-08-12 11:03:46.107319859 +0000 UTC m=+442.744184355 I0812 11:03:46.144994 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:46.144977599 +0000 UTC m=+442.781842105 I0812 11:03:46.168297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kxgxl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:04:02.566211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:04:02.566211 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 11:04:02.566177317 +0000 UTC m=+459.203041803 I0812 11:04:02.566309 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 11:04:02.566237938 +0000 UTC m=+459.203102424 I0812 11:04:02.588547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:04:02.588602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:04:02.588617 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 11:04:02.588610054 +0000 UTC m=+459.225474540 I0812 11:04:03.141103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5rldg" condition "Approved" to 2026-08-12 11:04:03.141080609 +0000 UTC m=+459.777945125 I0812 11:04:03.170399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5rldg" condition "Ready" to 2026-08-12 11:04:03.170387207 +0000 UTC m=+459.807251703 I0812 11:04:03.214785 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:04:03.214770511 +0000 UTC m=+459.851635007 I0812 11:04:03.247371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:07:21.263821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:07:21.264035 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 11:07:21.26378513 +0000 UTC m=+657.900649646 I0812 11:07:21.264339 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 11:07:21.264329768 +0000 UTC m=+657.901194294 I0812 11:07:21.299652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:07:21.299749 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 11:07:21.299739955 +0000 UTC m=+657.936604461 I0812 11:07:21.650761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:07:21.687249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m2rnd" condition "Approved" to 2026-08-12 11:07:21.687238465 +0000 UTC m=+658.324102951 I0812 11:07:21.710377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m2rnd" condition "Ready" to 2026-08-12 11:07:21.710366401 +0000 UTC m=+658.347230897 I0812 11:07:21.747527 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:07:21.747515635 +0000 UTC m=+658.384380121 I0812 11:07:21.770909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:08:01.498567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:08:01.498598 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-12 11:08:01.498589281 +0000 UTC m=+698.135453767 I0812 11:08:01.498907 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-12 11:08:01.498903644 +0000 UTC m=+698.135768130 I0812 11:08:01.519531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:08:01.519694 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-12 11:08:01.519685721 +0000 UTC m=+698.156550227 I0812 11:08:02.028278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:08:02.060933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t4kh5" condition "Approved" to 2026-08-12 11:08:02.060920357 +0000 UTC m=+698.697784883 I0812 11:08:02.082793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t4kh5" condition "Ready" to 2026-08-12 11:08:02.082784355 +0000 UTC m=+698.719648841 I0812 11:08:02.122249 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:08:02.122238306 +0000 UTC m=+698.759102782 I0812 11:08:02.147970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"