I0907 08:32:49.343853 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0907 08:32:49.343933 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0907 08:32:49.344000 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0907 08:32:49.346633 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0907 08:32:49.346998 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0907 08:32:49.347054 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0907 08:32:49.347060 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0907 08:32:49.351141 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0907 08:32:49.362621 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0907 08:32:49.365605 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0907 08:32:49.365773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0907 08:32:49.367941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0907 08:32:49.369960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0907 08:32:49.372078 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0907 08:32:49.375607 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0907 08:32:49.381244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0907 08:32:49.384359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0907 08:32:49.386872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0907 08:32:49.389454 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0907 08:32:49.389497 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0907 08:32:49.389601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0907 08:32:49.392168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0907 08:32:49.394884 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0907 08:32:49.397350 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0907 08:32:49.400281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0907 08:32:49.404257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0907 08:32:49.407374 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0907 08:32:49.407480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0907 08:32:49.410373 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0907 08:32:49.412789 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0907 08:32:49.415202 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0907 08:32:49.415254 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0907 08:32:49.415304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0907 08:32:49.418530 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.418534 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.419304 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.449501 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.462445 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.477241 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.492554 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.506060 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.516848 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:32:49.518682 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 08:33:01.276697 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 08:33:01.276678349 +0000 UTC m=+11.980786600 I0907 08:33:02.046620 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 08:33:02.046605252 +0000 UTC m=+12.750713523 I0907 08:33:02.047705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:33:02.047735 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 08:33:02.047729213 +0000 UTC m=+12.751837484 E0907 08:33:02.062371 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 08:33:02.062523 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 08:33:02.062515126 +0000 UTC m=+12.766623377 E0907 08:33:02.062570 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 08:33:02.063559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:33:02.063771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:33:02.063935 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 08:33:02.06388327 +0000 UTC m=+12.767991551 E0907 08:33:02.075498 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0907 08:33:02.075829 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:33:02.075898 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:33:02.076231 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0907 08:33:02.114278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dllwl" condition "Approved" to 2026-09-07 08:33:02.114256607 +0000 UTC m=+12.818364868 I0907 08:33:02.135616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dllwl" condition "Ready" to 2026-09-07 08:33:02.135605231 +0000 UTC m=+12.839713472 I0907 08:33:02.160875 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:33:02.160859316 +0000 UTC m=+12.864967587 I0907 08:33:02.184671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:33:02.184930 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:33:02.184925208 +0000 UTC m=+12.889033449 I0907 08:33:02.201303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:33:07.076795 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:33:07.076781902 +0000 UTC m=+17.780890183 I0907 08:33:29.708758 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 08:33:29.708727308 +0000 UTC m=+40.412835559 I0907 08:33:29.709086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:33:29.709110 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 08:33:29.709106654 +0000 UTC m=+40.413214905 I0907 08:33:29.725562 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 08:33:29.725543911 +0000 UTC m=+40.429652152 I0907 08:33:29.730992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:33:29.731049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:33:29.731061 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 08:33:29.731057473 +0000 UTC m=+40.435165714 I0907 08:33:29.843621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:33:29.858097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2mkw2" condition "Approved" to 2026-09-07 08:33:29.85808693 +0000 UTC m=+40.562195191 I0907 08:33:29.886986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2mkw2" condition "Ready" to 2026-09-07 08:33:29.886975697 +0000 UTC m=+40.591083938 I0907 08:33:29.916602 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:33:29.916591794 +0000 UTC m=+40.620700055 I0907 08:33:29.958327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:33:29.958814 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:33:29.958806905 +0000 UTC m=+40.662915156 I0907 08:33:29.982976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:38:33.011005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-226.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:38:33.011073 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-226.nip.io-tls" condition "Issuing" to 2026-09-07 08:38:33.011047797 +0000 UTC m=+343.715156038 I0907 08:38:33.011073 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-226.nip.io-tls" condition "Ready" to 2026-09-07 08:38:33.011031536 +0000 UTC m=+343.715139777 I0907 08:38:33.029146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:38:33.029215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-226.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:38:33.029231 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-226.nip.io-tls" condition "Issuing" to 2026-09-07 08:38:33.029226113 +0000 UTC m=+343.733334344 I0907 08:38:33.216494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-226.nip.io-tls-rp7zv" condition "Approved" to 2026-09-07 08:38:33.216483804 +0000 UTC m=+343.920592045 I0907 08:38:33.254298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-226.nip.io-tls-rp7zv" condition "Ready" to 2026-09-07 08:38:33.254288856 +0000 UTC m=+343.958397097 I0907 08:38:33.286812 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-226.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:38:33.286799923 +0000 UTC m=+343.990908164 I0907 08:38:33.311136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:38:33.311476 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-226.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:38:33.311470884 +0000 UTC m=+344.015579115 I0907 08:38:33.331836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:39:43.629403 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 08:39:43.62935926 +0000 UTC m=+414.333467531 I0907 08:39:43.629549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:39:43.629608 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 08:39:43.629599525 +0000 UTC m=+414.333707786 E0907 08:39:43.640023 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 08:39:43.640128 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 08:39:43.640117755 +0000 UTC m=+414.344226036 E0907 08:39:43.640160 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 08:39:43.648796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:39:43.648966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:39:43.648998 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 08:39:43.64898939 +0000 UTC m=+414.353097661 E0907 08:39:43.653128 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0907 08:39:43.653245 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:39:43.653295 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:39:43.653351 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0907 08:39:43.687859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:39:43.691386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-h9gwr" condition "Approved" to 2026-09-07 08:39:43.691376298 +0000 UTC m=+414.395484539 I0907 08:39:43.706978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-h9gwr" condition "Ready" to 2026-09-07 08:39:43.706965859 +0000 UTC m=+414.411074110 I0907 08:39:43.733040 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:39:43.7330263 +0000 UTC m=+414.437134581 I0907 08:39:43.748847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:39:43.749266 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:39:43.749255975 +0000 UTC m=+414.453364226 I0907 08:39:43.766108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:39:48.654333 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:39:48.654320469 +0000 UTC m=+419.358428730 I0907 08:40:28.211307 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 08:40:28.211251286 +0000 UTC m=+458.915359537 I0907 08:40:28.211789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:40:28.211856 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 08:40:28.211848108 +0000 UTC m=+458.915956359 I0907 08:40:28.219022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:40:28.219652 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 08:40:28.219644699 +0000 UTC m=+458.923752940 I0907 08:40:28.219897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 08:40:28.219883004 +0000 UTC m=+458.923991245 I0907 08:40:28.254526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:28.254813 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 08:40:28.254808183 +0000 UTC m=+458.958916424 I0907 08:40:28.255013 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 08:40:28.255000637 +0000 UTC m=+458.959108878 I0907 08:40:28.255493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:40:28.255506 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 08:40:28.255502826 +0000 UTC m=+458.959611067 I0907 08:40:28.263134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:28.263193 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 08:40:28.263189225 +0000 UTC m=+458.967297466 I0907 08:40:28.278315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:28.278798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:40:28.278828 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 08:40:28.278821806 +0000 UTC m=+458.982930047 I0907 08:40:28.439880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:28.482123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sj5mv" condition "Approved" to 2026-09-07 08:40:28.48211435 +0000 UTC m=+459.186222581 I0907 08:40:28.515722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sj5mv" condition "Ready" to 2026-09-07 08:40:28.515713281 +0000 UTC m=+459.219821522 I0907 08:40:28.545853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bj5lh" condition "Approved" to 2026-09-07 08:40:28.545841602 +0000 UTC m=+459.249949863 I0907 08:40:28.549486 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:40:28.549478006 +0000 UTC m=+459.253586247 I0907 08:40:28.571483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bj5lh" condition "Ready" to 2026-09-07 08:40:28.571473859 +0000 UTC m=+459.275582100 I0907 08:40:28.583942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:28.602015 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:40:28.602003858 +0000 UTC m=+459.306112099 I0907 08:40:28.625378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:28.634491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:28.634932 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:40:28.634925455 +0000 UTC m=+459.339033696 I0907 08:40:29.006974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:29.097988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2mbps" condition "Approved" to 2026-09-07 08:40:29.097978612 +0000 UTC m=+459.802086853 I0907 08:40:29.318498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2mbps" condition "Ready" to 2026-09-07 08:40:29.318479334 +0000 UTC m=+460.022587615 I0907 08:40:29.662095 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:40:29.662076767 +0000 UTC m=+460.366185018 I0907 08:40:29.756250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:37.330396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:40:37.330436 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" condition "Issuing" to 2026-09-07 08:40:37.330426398 +0000 UTC m=+468.034534669 I0907 08:40:37.331191 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" condition "Ready" to 2026-09-07 08:40:37.331166863 +0000 UTC m=+468.035275204 I0907 08:40:37.347157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vt92r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:37.347358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:40:37.347435 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" condition "Issuing" to 2026-09-07 08:40:37.347427794 +0000 UTC m=+468.051536055 I0907 08:40:37.584929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vt92r-86f5c" condition "Approved" to 2026-09-07 08:40:37.58491281 +0000 UTC m=+468.289021091 I0907 08:40:37.607073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vt92r-86f5c" condition "Ready" to 2026-09-07 08:40:37.607060231 +0000 UTC m=+468.311168482 I0907 08:40:37.636674 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:40:37.636660244 +0000 UTC m=+468.340768495 I0907 08:40:37.656177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vt92r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:37.656471 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:40:37.656466047 +0000 UTC m=+468.360574288 I0907 08:40:37.673743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vt92r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:37.677446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vt92r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vt92r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:51.463158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:40:51.463204 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 08:40:51.463196531 +0000 UTC m=+482.167304772 I0907 08:40:51.463695 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 08:40:51.46368675 +0000 UTC m=+482.167794991 I0907 08:40:51.483737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:51.483822 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 08:40:51.483815014 +0000 UTC m=+482.187923255 I0907 08:40:51.616212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:51.644416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vhcbf" condition "Approved" to 2026-09-07 08:40:51.644403646 +0000 UTC m=+482.348511887 I0907 08:40:51.661754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vhcbf" condition "Ready" to 2026-09-07 08:40:51.661744434 +0000 UTC m=+482.365852675 I0907 08:40:51.698191 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:40:51.698168595 +0000 UTC m=+482.402276836 I0907 08:40:51.720792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:40:51.721039 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:40:51.721033094 +0000 UTC m=+482.425141335 I0907 08:40:51.752819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:44:06.966505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:44:06.966561 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 08:44:06.966547537 +0000 UTC m=+677.670655828 I0907 08:44:06.966763 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 08:44:06.966755841 +0000 UTC m=+677.670864092 I0907 08:44:06.986281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:44:06.986363 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 08:44:06.986355164 +0000 UTC m=+677.690463415 I0907 08:44:07.280812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:44:07.326392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qhct4" condition "Approved" to 2026-09-07 08:44:07.32638029 +0000 UTC m=+678.030488531 I0907 08:44:07.349065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qhct4" condition "Ready" to 2026-09-07 08:44:07.349057059 +0000 UTC m=+678.053165290 I0907 08:44:07.378329 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:44:07.378320085 +0000 UTC m=+678.082428336 I0907 08:44:07.401978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:44:07.402407 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:44:07.40240195 +0000 UTC m=+678.106510191 I0907 08:44:07.424832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:44:48.249805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:44:48.249876 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 08:44:48.249866762 +0000 UTC m=+718.953975043 I0907 08:44:48.250395 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-07 08:44:48.250385779 +0000 UTC m=+718.954494050 I0907 08:44:48.274270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:44:48.274349 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-07 08:44:48.274342269 +0000 UTC m=+718.978450510 I0907 08:44:48.562026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:44:48.597834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cft69" condition "Approved" to 2026-09-07 08:44:48.597821862 +0000 UTC m=+719.301930103 I0907 08:44:48.624781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cft69" condition "Ready" to 2026-09-07 08:44:48.624773051 +0000 UTC m=+719.328881292 I0907 08:44:48.650546 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:44:48.650530951 +0000 UTC m=+719.354639192 I0907 08:44:48.675859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"