I0915 11:24:35.852218 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0915 11:24:35.852345 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0915 11:24:35.852433 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0915 11:24:35.857252 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0915 11:24:35.865951 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0915 11:24:35.866098 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0915 11:24:35.866237 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0915 11:24:35.868579 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0915 11:24:35.891921 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0915 11:24:35.897470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0915 11:24:35.906716 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0915 11:24:35.906780 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0915 11:24:35.906814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0915 11:24:35.910040 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0915 11:24:35.910194 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0915 11:24:35.912955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0915 11:24:35.915069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0915 11:24:35.917529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0915 11:24:35.926126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0915 11:24:35.933409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0915 11:24:35.937639 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0915 11:24:35.937808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0915 11:24:35.941727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0915 11:24:35.949467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0915 11:24:35.954355 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0915 11:24:35.957390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0915 11:24:35.967383 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0915 11:24:35.967538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0915 11:24:35.970519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0915 11:24:35.976381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0915 11:24:35.979112 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0915 11:24:35.979200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0915 11:24:35.982432 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0915 11:24:35.985827 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:35.986434 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:35.986818 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:35.986829 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:35.987286 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:35.987343 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:35.988456 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:35.989172 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:35.997352 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:36.107488 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0915 11:24:53.417160 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-15 11:24:53.417139192 +0000 UTC m=+17.624259339 I0915 11:24:54.205289 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 11:24:54.205272142 +0000 UTC m=+18.412392309 I0915 11:24:54.206278 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:24:54.206301 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-15 11:24:54.206297599 +0000 UTC m=+18.413417756 E0915 11:24:54.225765 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:24:54.225920 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-15 11:24:54.225908712 +0000 UTC m=+18.433028869 E0915 11:24:54.225952 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:24:54.231155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:24:54.231276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:24:54.231315 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-15 11:24:54.231302403 +0000 UTC m=+18.438422580 E0915 11:24:54.238160 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0915 11:24:54.238284 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:24:54.238333 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:24:54.238634 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0915 11:24:54.277125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:24:54.283484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c4xfw" condition "Approved" to 2026-09-15 11:24:54.283461457 +0000 UTC m=+18.490581634 I0915 11:24:54.300529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c4xfw" condition "Ready" to 2026-09-15 11:24:54.300514353 +0000 UTC m=+18.507634510 I0915 11:24:54.326481 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:24:54.326460472 +0000 UTC m=+18.533580629 I0915 11:24:54.345273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:24:54.346380 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:24:54.346364282 +0000 UTC m=+18.553484499 I0915 11:24:54.363514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:24:54.364675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:24:59.239165 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:24:59.239131694 +0000 UTC m=+23.446251881 I0915 11:25:23.425246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:25:23.425284 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 11:25:23.425274293 +0000 UTC m=+47.632394440 I0915 11:25:23.425786 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-15 11:25:23.42578188 +0000 UTC m=+47.632902027 I0915 11:25:23.447111 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-15 11:25:23.447097382 +0000 UTC m=+47.654217529 I0915 11:25:23.457366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:25:23.457447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:25:23.457470 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 11:25:23.457463384 +0000 UTC m=+47.664583531 I0915 11:25:23.674246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pzrbq" condition "Approved" to 2026-09-15 11:25:23.674221661 +0000 UTC m=+47.881341808 I0915 11:25:23.721309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pzrbq" condition "Ready" to 2026-09-15 11:25:23.721295644 +0000 UTC m=+47.928415792 I0915 11:25:23.762025 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:25:23.762009411 +0000 UTC m=+47.969129558 I0915 11:25:23.785399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:31:26.626392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-213.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:31:26.626503 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-213.nip.io-tls" condition "Issuing" to 2026-09-15 11:31:26.626494508 +0000 UTC m=+410.833614695 I0915 11:31:26.626786 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-213.nip.io-tls" condition "Ready" to 2026-09-15 11:31:26.626005724 +0000 UTC m=+410.833125911 I0915 11:31:26.650243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-213.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-213.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:31:26.650374 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-213.nip.io-tls" condition "Ready" to 2026-09-15 11:31:26.65035903 +0000 UTC m=+410.857479237 I0915 11:31:26.861856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-213.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-213.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:31:26.904035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-213.nip.io-tls-8wccq" condition "Approved" to 2026-09-15 11:31:26.904017302 +0000 UTC m=+411.111137489 I0915 11:31:26.943874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-213.nip.io-tls-8wccq" condition "Ready" to 2026-09-15 11:31:26.943858845 +0000 UTC m=+411.150978992 I0915 11:31:26.987057 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-213.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:31:26.987042591 +0000 UTC m=+411.194162748 I0915 11:31:27.007764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-213.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-213.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:31:27.008491 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-213.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:31:27.008481195 +0000 UTC m=+411.215601352 I0915 11:31:27.015033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-213.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-213.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:31:27.033353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-213.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-213.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:38.143694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:32:38.143732 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 11:32:38.143724295 +0000 UTC m=+482.350844472 I0915 11:32:38.143691 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-15 11:32:38.143671813 +0000 UTC m=+482.350792000 E0915 11:32:38.155477 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:32:38.155510 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-15 11:32:38.155502359 +0000 UTC m=+482.362622506 E0915 11:32:38.155557 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 11:32:38.158535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:38.158754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:32:38.158847 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 11:32:38.158833712 +0000 UTC m=+482.365953889 E0915 11:32:38.166987 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0915 11:32:38.167758 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:32:38.167806 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 11:32:38.167920 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0915 11:32:38.206541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-p7c6v" condition "Approved" to 2026-09-15 11:32:38.206524108 +0000 UTC m=+482.413644255 I0915 11:32:38.238882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-p7c6v" condition "Ready" to 2026-09-15 11:32:38.23886977 +0000 UTC m=+482.445989917 I0915 11:32:38.264965 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:32:38.264952167 +0000 UTC m=+482.472072314 I0915 11:32:38.290726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:38.291027 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:32:38.291020803 +0000 UTC m=+482.498140950 I0915 11:32:38.295984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:38.320940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:32:43.167390 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:32:43.167376703 +0000 UTC m=+487.374496880 I0915 11:33:26.179598 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-15 11:33:26.179560092 +0000 UTC m=+530.386680239 I0915 11:33:26.180275 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-15 11:33:26.180259864 +0000 UTC m=+530.387380001 I0915 11:33:26.180544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:26.183182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-15 11:33:26.183177868 +0000 UTC m=+530.390298015 I0915 11:33:26.181893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:26.183270 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-15 11:33:26.183267731 +0000 UTC m=+530.390387868 I0915 11:33:26.194014 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-15 11:33:26.193995875 +0000 UTC m=+530.401116022 I0915 11:33:26.194458 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:26.194524 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-15 11:33:26.194514162 +0000 UTC m=+530.401634309 I0915 11:33:26.229237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:26.229446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:26.229507 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-15 11:33:26.229498496 +0000 UTC m=+530.436618643 I0915 11:33:26.236314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:26.236419 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-15 11:33:26.236410337 +0000 UTC m=+530.443530484 I0915 11:33:26.236320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:26.236517 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-15 11:33:26.23650003 +0000 UTC m=+530.443620177 I0915 11:33:26.412547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:26.480065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f9gj6" condition "Approved" to 2026-09-15 11:33:26.48004841 +0000 UTC m=+530.687168557 I0915 11:33:26.509821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f9gj6" condition "Ready" to 2026-09-15 11:33:26.509810926 +0000 UTC m=+530.716931073 I0915 11:33:26.543361 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:26.543347243 +0000 UTC m=+530.750467380 I0915 11:33:26.571832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:26.631808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:26.645141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:26.645505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mcvgz" condition "Approved" to 2026-09-15 11:33:26.645493392 +0000 UTC m=+530.852613539 I0915 11:33:26.726550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mcvgz" condition "Ready" to 2026-09-15 11:33:26.726540555 +0000 UTC m=+530.933660702 I0915 11:33:26.773201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:26.789412 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:26.789396633 +0000 UTC m=+530.996516780 I0915 11:33:26.797464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-trds2" condition "Approved" to 2026-09-15 11:33:26.797446341 +0000 UTC m=+531.004566488 I0915 11:33:26.900128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:27.250646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-trds2" condition "Ready" to 2026-09-15 11:33:27.250626798 +0000 UTC m=+531.457746945 I0915 11:33:27.542248 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:27.542221226 +0000 UTC m=+531.749341373 I0915 11:33:27.739891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:27.740368 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:27.740356692 +0000 UTC m=+531.947476849 I0915 11:33:27.991526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:35.473168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:35.473195 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" condition "Issuing" to 2026-09-15 11:33:35.473188112 +0000 UTC m=+539.680308249 I0915 11:33:35.474023 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" condition "Ready" to 2026-09-15 11:33:35.474017058 +0000 UTC m=+539.681137215 I0915 11:33:35.492211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:35.492393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:35.492442 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" condition "Issuing" to 2026-09-15 11:33:35.492434623 +0000 UTC m=+539.699554780 I0915 11:33:35.976892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h7tnz-kxmvb" condition "Approved" to 2026-09-15 11:33:35.976878371 +0000 UTC m=+540.183998518 I0915 11:33:36.014145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h7tnz-kxmvb" condition "Ready" to 2026-09-15 11:33:36.014134984 +0000 UTC m=+540.221255131 I0915 11:33:36.052373 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:36.052359439 +0000 UTC m=+540.259479586 I0915 11:33:36.074290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:36.074697 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:36.07467204 +0000 UTC m=+540.281792187 I0915 11:33:36.096059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:36.096296 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7tnz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:36.096290548 +0000 UTC m=+540.303410695 I0915 11:33:50.243070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:50.243182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-15 11:33:50.243176637 +0000 UTC m=+554.450296794 I0915 11:33:50.243070 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-15 11:33:50.243023871 +0000 UTC m=+554.450144018 I0915 11:33:50.267944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:50.268041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:33:50.268061 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-15 11:33:50.268055166 +0000 UTC m=+554.475175313 I0915 11:33:50.444083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gwsqg" condition "Approved" to 2026-09-15 11:33:50.444066344 +0000 UTC m=+554.651186491 I0915 11:33:50.469594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gwsqg" condition "Ready" to 2026-09-15 11:33:50.469580224 +0000 UTC m=+554.676700371 I0915 11:33:50.527473 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:50.527447038 +0000 UTC m=+554.734567185 I0915 11:33:50.546417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:50.546770 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:33:50.546763326 +0000 UTC m=+554.753883473 I0915 11:33:50.557000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:33:50.567092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:08.302331 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 11:37:08.302304985 +0000 UTC m=+752.509425132 I0915 11:37:08.302396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:37:08.302440 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-15 11:37:08.302430657 +0000 UTC m=+752.509550814 I0915 11:37:08.321099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:08.321177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:37:08.321196 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-15 11:37:08.321188858 +0000 UTC m=+752.528309005 I0915 11:37:08.465738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-f9ssd" condition "Approved" to 2026-09-15 11:37:08.465724699 +0000 UTC m=+752.672844856 I0915 11:37:08.485823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-f9ssd" condition "Ready" to 2026-09-15 11:37:08.485806974 +0000 UTC m=+752.692927131 I0915 11:37:08.515322 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:37:08.515306379 +0000 UTC m=+752.722426526 I0915 11:37:08.539752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:08.588631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:52.617433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 11:37:52.617521 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-15 11:37:52.617510449 +0000 UTC m=+796.824630626 I0915 11:37:52.617457 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-15 11:37:52.617431558 +0000 UTC m=+796.824551715 I0915 11:37:52.646319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:52.646437 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-15 11:37:52.646424409 +0000 UTC m=+796.853544586 I0915 11:37:52.815960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:52.848694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xjfmc" condition "Approved" to 2026-09-15 11:37:52.848676147 +0000 UTC m=+797.055796324 I0915 11:37:52.869560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xjfmc" condition "Ready" to 2026-09-15 11:37:52.86954686 +0000 UTC m=+797.076666997 I0915 11:37:52.902640 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:37:52.902622513 +0000 UTC m=+797.109742660 I0915 11:37:52.927141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:52.927564 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:37:52.9275567 +0000 UTC m=+797.134676847 I0915 11:37:52.948444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:52.959292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 11:37:52.959605 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 11:37:52.959597739 +0000 UTC m=+797.166717886