I0909 06:15:17.281121 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0909 06:15:17.281332 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0909 06:15:17.281464 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0909 06:15:17.289316 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0909 06:15:17.290016 1 controller.go:156] "cert-manager/controller: starting leader election" I0909 06:15:17.290037 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0909 06:15:17.290152 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0909 06:15:17.293788 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0909 06:15:17.314393 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0909 06:15:17.319672 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0909 06:15:17.324454 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0909 06:15:17.331826 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0909 06:15:17.331859 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0909 06:15:17.331874 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0909 06:15:17.331966 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0909 06:15:17.334804 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0909 06:15:17.337065 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0909 06:15:17.337180 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0909 06:15:17.339621 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0909 06:15:17.342284 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0909 06:15:17.345027 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0909 06:15:17.347510 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0909 06:15:17.353510 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0909 06:15:17.353603 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0909 06:15:17.357724 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0909 06:15:17.361355 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0909 06:15:17.365015 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0909 06:15:17.368842 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0909 06:15:17.372639 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0909 06:15:17.372672 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0909 06:15:17.375503 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0909 06:15:17.377774 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0909 06:15:17.381783 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0909 06:15:30.541038 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-09 06:15:30.541013221 +0000 UTC m=+13.296121204 I0909 06:15:31.282408 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:15:31.282453 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-09 06:15:31.282447508 +0000 UTC m=+14.037555461 I0909 06:15:31.282684 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-09 06:15:31.282667055 +0000 UTC m=+14.037775038 I0909 06:15:31.303407 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:15:31.303464 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-09 06:15:31.303458128 +0000 UTC m=+14.058566081 E0909 06:15:31.306120 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0909 06:15:31.306158 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-09 06:15:31.306154345 +0000 UTC m=+14.061262298 E0909 06:15:31.306174 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0909 06:15:31.322309 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0909 06:15:31.322451 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0909 06:15:31.322632 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0909 06:15:31.322722 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0909 06:15:31.329602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7pbtj" condition "Approved" to 2026-09-09 06:15:31.329588134 +0000 UTC m=+14.084696117 I0909 06:15:31.330232 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:15:31.330248 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:15:31.330337 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-09 06:15:31.330329479 +0000 UTC m=+14.085437472 I0909 06:15:31.346860 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-09 06:15:31.346845352 +0000 UTC m=+14.101953305 I0909 06:15:31.347390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7pbtj" condition "Ready" to 2026-09-09 06:15:31.347334709 +0000 UTC m=+14.102442662 I0909 06:15:31.356970 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:15:31.374812 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:15:31.374794897 +0000 UTC m=+14.129902890 I0909 06:15:31.398709 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:15:31.399050 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:15:31.399039863 +0000 UTC m=+14.154147846 I0909 06:15:31.411233 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:15:31.419960 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:15:36.322754 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:15:36.32273671 +0000 UTC m=+19.077844673 I0909 06:15:59.958358 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:15:59.958394 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-09 06:15:59.958385747 +0000 UTC m=+42.713493710 I0909 06:15:59.958452 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-09 06:15:59.958434279 +0000 UTC m=+42.713542262 I0909 06:15:59.982996 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-09 06:15:59.982969291 +0000 UTC m=+42.738077244 I0909 06:15:59.990022 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:15:59.999135 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:15:59.999230 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-09 06:15:59.999221362 +0000 UTC m=+42.754329325 I0909 06:16:00.329487 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:16:00.340499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z9wgp" condition "Approved" to 2026-09-09 06:16:00.340484059 +0000 UTC m=+43.095592052 I0909 06:16:00.381171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z9wgp" condition "Ready" to 2026-09-09 06:16:00.380305222 +0000 UTC m=+43.135413205 I0909 06:16:00.413713 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:16:00.413694204 +0000 UTC m=+43.168802167 I0909 06:16:00.437022 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:16:00.437940 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:16:00.437916698 +0000 UTC m=+43.193024681 I0909 06:16:00.462744 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:16:00.463525 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:16:00.463514157 +0000 UTC m=+43.218622140 I0909 06:18:47.199038 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.162-253-55-127.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:18:47.199099 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-127.nip.io-tls" condition "Issuing" to 2026-09-09 06:18:47.199068472 +0000 UTC m=+209.954176455 I0909 06:18:47.199375 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-127.nip.io-tls" condition "Ready" to 2026-09-09 06:18:47.199350714 +0000 UTC m=+209.954458697 I0909 06:18:47.226947 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.162-253-55-127.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-127.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:18:47.227045 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.162-253-55-127.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:18:47.227070 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-127.nip.io-tls" condition "Issuing" to 2026-09-09 06:18:47.227062236 +0000 UTC m=+209.982170229 I0909 06:18:47.436729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-127.nip.io-tls-2xdjb" condition "Approved" to 2026-09-09 06:18:47.436711395 +0000 UTC m=+210.191819378 I0909 06:18:47.468781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-127.nip.io-tls-2xdjb" condition "Ready" to 2026-09-09 06:18:47.468764376 +0000 UTC m=+210.223872369 I0909 06:18:47.503579 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-127.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:18:47.503561663 +0000 UTC m=+210.258669656 I0909 06:18:47.541641 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.162-253-55-127.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-127.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:19:44.916538 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:19:44.916632 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-09 06:19:44.916620423 +0000 UTC m=+267.671728416 I0909 06:19:44.916980 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-09 06:19:44.916954531 +0000 UTC m=+267.672062484 E0909 06:19:44.926323 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0909 06:19:44.926491 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-09 06:19:44.926477482 +0000 UTC m=+267.681585505 E0909 06:19:44.926617 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0909 06:19:44.935883 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:19:44.935968 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-09 06:19:44.935957614 +0000 UTC m=+267.691065607 E0909 06:19:44.939366 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0909 06:19:44.939853 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0909 06:19:44.939885 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0909 06:19:44.939950 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0909 06:19:44.957108 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:19:44.983113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w5z8s" condition "Approved" to 2026-09-09 06:19:44.983080117 +0000 UTC m=+267.738188080 I0909 06:19:45.001438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-w5z8s" condition "Ready" to 2026-09-09 06:19:45.001422207 +0000 UTC m=+267.756530190 I0909 06:19:45.034929 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:19:45.034913621 +0000 UTC m=+267.790021574 I0909 06:19:45.055107 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:19:49.942611 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:19:49.94259166 +0000 UTC m=+272.697699653 I0909 06:20:34.176489 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:20:34.176559 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-09 06:20:34.176551013 +0000 UTC m=+316.931658966 I0909 06:20:34.184562 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-09 06:20:34.184530978 +0000 UTC m=+316.939638951 I0909 06:20:34.187568 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:20:34.187599 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-09 06:20:34.187595425 +0000 UTC m=+316.942703378 I0909 06:20:34.189944 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-09 06:20:34.189925851 +0000 UTC m=+316.945033804 I0909 06:20:34.194485 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:20:34.194566 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-09 06:20:34.194560781 +0000 UTC m=+316.949668734 I0909 06:20:34.194944 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-09 06:20:34.194924312 +0000 UTC m=+316.950032265 I0909 06:20:34.259667 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.259731 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-09 06:20:34.259723382 +0000 UTC m=+317.014831335 I0909 06:20:34.304115 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.312411 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-09 06:20:34.304189749 +0000 UTC m=+317.059297702 I0909 06:20:34.314612 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.314685 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-09 06:20:34.314677284 +0000 UTC m=+317.069785237 I0909 06:20:34.381421 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.432116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jhtlf" condition "Approved" to 2026-09-09 06:20:34.432102572 +0000 UTC m=+317.187210525 I0909 06:20:34.448140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jhtlf" condition "Ready" to 2026-09-09 06:20:34.448122435 +0000 UTC m=+317.203230388 I0909 06:20:34.474247 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:34.474235092 +0000 UTC m=+317.229343035 I0909 06:20:34.495811 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.496242 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:34.496231754 +0000 UTC m=+317.251339707 I0909 06:20:34.502200 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.509424 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.521804 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.553252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n8v9p" condition "Approved" to 2026-09-09 06:20:34.553230254 +0000 UTC m=+317.308338207 I0909 06:20:34.569812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n8v9p" condition "Ready" to 2026-09-09 06:20:34.569797711 +0000 UTC m=+317.324905664 I0909 06:20:34.575541 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.776579 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:34.776558793 +0000 UTC m=+317.531666756 I0909 06:20:34.914964 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:34.916122 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:34.916110265 +0000 UTC m=+317.671218248 I0909 06:20:35.263219 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:35.329465 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:35.419377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hkgqd" condition "Approved" to 2026-09-09 06:20:35.419359996 +0000 UTC m=+318.174467949 I0909 06:20:35.832916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hkgqd" condition "Ready" to 2026-09-09 06:20:35.832897013 +0000 UTC m=+318.588004996 I0909 06:20:36.032488 1 issuing_controller.go:324] "cert-manager/certificates-issuing: next private key does not match CSR public key, waiting for requestmanager controller" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-hkgqd" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-mdxp4" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0909 06:20:36.213886 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"prometheus-tls-mdxp4\" already exists" key="monitoring/prometheus-tls" I0909 06:20:36.276445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zx2ls" condition "Approved" to 2026-09-09 06:20:36.276414205 +0000 UTC m=+319.031522208 I0909 06:20:36.337509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zx2ls" condition "Ready" to 2026-09-09 06:20:36.337490096 +0000 UTC m=+319.092598059 I0909 06:20:36.821811 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:36.821791504 +0000 UTC m=+319.576899467 I0909 06:20:36.917059 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:36.918046 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:36.918032538 +0000 UTC m=+319.673140521 I0909 06:20:37.117146 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:44.453029 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zbd27-tls" condition "Ready" to 2026-09-09 06:20:44.452982988 +0000 UTC m=+327.208090971 I0909 06:20:44.453494 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zbd27-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:20:44.453507 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zbd27-tls" condition "Issuing" to 2026-09-09 06:20:44.453503773 +0000 UTC m=+327.208611736 I0909 06:20:44.487533 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zbd27-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zbd27-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:44.487621 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zbd27-tls" condition "Ready" to 2026-09-09 06:20:44.487614651 +0000 UTC m=+327.242722594 I0909 06:20:44.561965 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zbd27-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zbd27-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:44.600677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zbd27-58r8h" condition "Approved" to 2026-09-09 06:20:44.600662917 +0000 UTC m=+327.355770880 I0909 06:20:44.627539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zbd27-58r8h" condition "Ready" to 2026-09-09 06:20:44.62752672 +0000 UTC m=+327.382634683 I0909 06:20:44.656865 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zbd27-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:44.656849155 +0000 UTC m=+327.411957108 I0909 06:20:44.680963 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zbd27-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zbd27-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:57.053874 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-09 06:20:57.053858221 +0000 UTC m=+339.808966174 I0909 06:20:57.055055 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:20:57.055103 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-09 06:20:57.055093579 +0000 UTC m=+339.810201532 I0909 06:20:57.075242 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:57.075468 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:20:57.076740 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-09 06:20:57.07673126 +0000 UTC m=+339.831839213 I0909 06:20:57.315056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pbd9p" condition "Approved" to 2026-09-09 06:20:57.31504093 +0000 UTC m=+340.070148893 I0909 06:20:57.341250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pbd9p" condition "Ready" to 2026-09-09 06:20:57.341227193 +0000 UTC m=+340.096335166 I0909 06:20:57.379396 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:57.379377246 +0000 UTC m=+340.134485199 I0909 06:20:57.402599 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:20:57.403499 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:20:57.403490243 +0000 UTC m=+340.158598196 I0909 06:20:57.424828 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:24:05.140301 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:24:05.140382 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-09 06:24:05.140337692 +0000 UTC m=+527.895445675 I0909 06:24:05.140870 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-09 06:24:05.140837002 +0000 UTC m=+527.895944995 I0909 06:24:05.157194 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:24:05.157421 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-09 06:24:05.157407715 +0000 UTC m=+527.912515698 I0909 06:24:05.363342 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:24:05.407526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vhg89" condition "Approved" to 2026-09-09 06:24:05.407499887 +0000 UTC m=+528.162607870 I0909 06:24:05.436109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vhg89" condition "Ready" to 2026-09-09 06:24:05.436078941 +0000 UTC m=+528.191186904 I0909 06:24:05.468827 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:24:05.468812959 +0000 UTC m=+528.223920922 I0909 06:24:05.498892 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:24:05.499839 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:24:05.499828015 +0000 UTC m=+528.254936008 I0909 06:24:05.524462 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:24:05.524966 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:24:05.524956095 +0000 UTC m=+528.280064048 I0909 06:24:47.222322 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-09 06:24:47.222298336 +0000 UTC m=+569.977406329 I0909 06:24:47.223221 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:24:47.223250 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-09 06:24:47.223244356 +0000 UTC m=+569.978352349 I0909 06:24:47.243861 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:24:47.243944 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0909 06:24:47.243974 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-09 06:24:47.24396549 +0000 UTC m=+569.999073473 I0909 06:24:47.669024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qj5hz" condition "Approved" to 2026-09-09 06:24:47.669001354 +0000 UTC m=+570.424109307 I0909 06:24:47.686064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qj5hz" condition "Ready" to 2026-09-09 06:24:47.686051712 +0000 UTC m=+570.441159685 I0909 06:24:47.715581 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:24:47.715567612 +0000 UTC m=+570.470675555 I0909 06:24:47.738595 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0909 06:24:47.739080 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-09 06:24:47.739073316 +0000 UTC m=+570.494181269 I0909 06:24:47.752179 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"