I0918 15:10:23.848845 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0918 15:10:23.849013 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 15:10:23.849122 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 15:10:23.853830 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 15:10:23.854252 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0918 15:10:23.854366 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 15:10:23.854383 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 15:10:23.856742 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 15:10:23.871355 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 15:10:23.876708 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 15:10:23.876785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 15:10:23.876805 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 15:10:23.876876 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 15:10:23.881412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 15:10:23.886654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 15:10:23.891970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 15:10:23.896035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 15:10:23.899928 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 15:10:23.900056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 15:10:23.903937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 15:10:23.907813 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 15:10:23.907921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 15:10:23.911799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 15:10:23.914734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 15:10:23.920086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 15:10:23.924265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 15:10:23.928049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0918 15:10:23.931728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 15:10:23.935536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 15:10:23.939404 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 15:10:23.939448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 15:10:23.943261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 15:10:23.946865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 15:10:23.950263 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:23.950356 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:23.950869 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:23.973069 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:23.999454 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:24.013845 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:24.030805 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:24.042784 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:24.059440 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:24.070201 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 15:10:37.037929 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 15:10:37.037912044 +0000 UTC m=+13.218885835 I0918 15:10:37.861804 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 15:10:37.86178454 +0000 UTC m=+14.042758301 I0918 15:10:37.862400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:10:37.862602 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 15:10:37.862520962 +0000 UTC m=+14.043494743 E0918 15:10:37.880554 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 15:10:37.880624 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 15:10:37.880615762 +0000 UTC m=+14.061589533 E0918 15:10:37.880701 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 15:10:37.885173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:10:37.885350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:10:37.885390 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 15:10:37.885377221 +0000 UTC m=+14.066351022 E0918 15:10:37.896767 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0918 15:10:37.897002 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 15:10:37.897101 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 15:10:37.897214 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 15:10:37.935230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:10:37.941179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-72c9z" condition "Approved" to 2026-09-18 15:10:37.941168146 +0000 UTC m=+14.122141917 I0918 15:10:37.962724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-72c9z" condition "Ready" to 2026-09-18 15:10:37.962709334 +0000 UTC m=+14.143683125 I0918 15:10:37.991599 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:10:37.991582993 +0000 UTC m=+14.172556794 I0918 15:10:38.018557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:10:38.018834 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:10:38.018829313 +0000 UTC m=+14.199803064 I0918 15:10:38.043351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:10:38.043680 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:10:38.043672032 +0000 UTC m=+14.224645803 I0918 15:10:42.897394 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:10:42.897374148 +0000 UTC m=+19.078347939 I0918 15:11:07.900278 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:11:07.900396 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 15:11:07.900381446 +0000 UTC m=+44.081355217 I0918 15:11:07.900293 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 15:11:07.900270464 +0000 UTC m=+44.081244235 I0918 15:11:07.914169 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 15:11:07.914149512 +0000 UTC m=+44.095123273 I0918 15:11:07.946201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:11:07.946328 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 15:11:07.946316671 +0000 UTC m=+44.127290432 I0918 15:11:08.256521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:11:08.308315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xr9px" condition "Approved" to 2026-09-18 15:11:08.308302241 +0000 UTC m=+44.489276032 I0918 15:11:08.335325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xr9px" condition "Ready" to 2026-09-18 15:11:08.335305565 +0000 UTC m=+44.516279346 I0918 15:11:08.368509 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:11:08.368487026 +0000 UTC m=+44.549460787 I0918 15:11:08.394391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:11:08.458077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:15:57.211712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:15:57.211814 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-116.nip.io-tls" condition "Issuing" to 2026-09-18 15:15:57.211802957 +0000 UTC m=+333.392776748 I0918 15:15:57.211828 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-116.nip.io-tls" condition "Ready" to 2026-09-18 15:15:57.211810047 +0000 UTC m=+333.392783808 I0918 15:15:57.232815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:15:57.232967 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-116.nip.io-tls" condition "Ready" to 2026-09-18 15:15:57.232957648 +0000 UTC m=+333.413931399 I0918 15:15:57.497200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:15:57.525327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-116.nip.io-tls-d6tq8" condition "Approved" to 2026-09-18 15:15:57.52531422 +0000 UTC m=+333.706287981 I0918 15:15:57.551641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-116.nip.io-tls-d6tq8" condition "Ready" to 2026-09-18 15:15:57.551630239 +0000 UTC m=+333.732604000 I0918 15:15:57.578223 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:15:57.578210995 +0000 UTC m=+333.759184756 I0918 15:15:57.604994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:15:57.605608 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:15:57.605599038 +0000 UTC m=+333.786572799 I0918 15:15:57.624578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:15:57.625057 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:15:57.625046751 +0000 UTC m=+333.806020522 I0918 15:15:57.627021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:05.870372 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 15:17:05.870349233 +0000 UTC m=+402.051323034 I0918 15:17:05.870529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:17:05.870685 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 15:17:05.870666059 +0000 UTC m=+402.051639930 E0918 15:17:05.886971 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 15:17:05.887086 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 15:17:05.88706661 +0000 UTC m=+402.068040411 E0918 15:17:05.887450 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 15:17:05.888625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:05.888709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:17:05.888743 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 15:17:05.888734302 +0000 UTC m=+402.069708063 E0918 15:17:05.901676 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0918 15:17:05.902880 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 15:17:05.903015 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 15:17:05.903143 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0918 15:17:05.940715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rzs2k" condition "Approved" to 2026-09-18 15:17:05.940671039 +0000 UTC m=+402.121644840 I0918 15:17:05.960813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rzs2k" condition "Ready" to 2026-09-18 15:17:05.960798222 +0000 UTC m=+402.141772003 I0918 15:17:05.984900 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:05.984886354 +0000 UTC m=+402.165860115 I0918 15:17:06.006647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:06.006993 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:06.006986806 +0000 UTC m=+402.187960557 I0918 15:17:06.007760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:06.019678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:06.019926 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:06.019918568 +0000 UTC m=+402.200892339 I0918 15:17:06.022136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:10.902343 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:10.902312703 +0000 UTC m=+407.083286504 I0918 15:17:55.559222 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 15:17:55.559205634 +0000 UTC m=+451.740179405 I0918 15:17:55.559559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:17:55.559583 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 15:17:55.559579531 +0000 UTC m=+451.740553312 I0918 15:17:55.583597 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 15:17:55.583582686 +0000 UTC m=+451.764556447 I0918 15:17:55.583894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:17:55.583927 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 15:17:55.583923092 +0000 UTC m=+451.764896853 I0918 15:17:55.636231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:55.636502 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 15:17:55.636494323 +0000 UTC m=+451.817468084 I0918 15:17:55.636695 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 15:17:55.636681846 +0000 UTC m=+451.817655607 I0918 15:17:55.636755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:17:55.636771 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 15:17:55.636768358 +0000 UTC m=+451.817742119 I0918 15:17:55.637274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:55.637310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:17:55.637322 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 15:17:55.637319637 +0000 UTC m=+451.818293398 I0918 15:17:55.684333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:55.684396 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 15:17:55.684386809 +0000 UTC m=+451.865360570 I0918 15:17:55.810400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:55.811143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:55.997251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:56.034211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w6c96" condition "Approved" to 2026-09-18 15:17:56.034187407 +0000 UTC m=+452.215161178 I0918 15:17:56.036367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vrhhg" condition "Approved" to 2026-09-18 15:17:56.036349946 +0000 UTC m=+452.217323717 I0918 15:17:56.037080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9kzgs" condition "Approved" to 2026-09-18 15:17:56.037073859 +0000 UTC m=+452.218047620 I0918 15:17:56.072827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vrhhg" condition "Ready" to 2026-09-18 15:17:56.072815035 +0000 UTC m=+452.253788806 I0918 15:17:56.075039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w6c96" condition "Ready" to 2026-09-18 15:17:56.075032924 +0000 UTC m=+452.256006695 I0918 15:17:56.075093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9kzgs" condition "Ready" to 2026-09-18 15:17:56.075076174 +0000 UTC m=+452.256049945 I0918 15:17:56.119944 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:56.119927595 +0000 UTC m=+452.300901366 I0918 15:17:56.154247 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:56.154233966 +0000 UTC m=+452.335207717 I0918 15:17:56.169013 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:56.168999452 +0000 UTC m=+452.349973213 I0918 15:17:56.353065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:56.353379 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:56.353371353 +0000 UTC m=+452.534345114 I0918 15:17:56.451899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:56.548696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:56.549123 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:56.5491162 +0000 UTC m=+452.730089961 I0918 15:17:56.960281 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:17:56.960262386 +0000 UTC m=+453.141236147 I0918 15:17:57.049577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:57.200180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:57.250058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:17:57.297339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:18:05.343030 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls" condition "Ready" to 2026-09-18 15:18:05.342985364 +0000 UTC m=+461.523959135 I0918 15:18:05.343073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:18:05.343144 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls" condition "Issuing" to 2026-09-18 15:18:05.343132937 +0000 UTC m=+461.524106708 I0918 15:18:05.361149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:18:05.361359 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls" condition "Ready" to 2026-09-18 15:18:05.361350751 +0000 UTC m=+461.542324522 I0918 15:18:05.693673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:18:05.735506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5hfxn-9qbbl" condition "Approved" to 2026-09-18 15:18:05.735484333 +0000 UTC m=+461.916458104 I0918 15:18:05.758912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5hfxn-9qbbl" condition "Ready" to 2026-09-18 15:18:05.758893311 +0000 UTC m=+461.939867082 I0918 15:18:05.797274 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:18:05.797249816 +0000 UTC m=+461.978223577 I0918 15:18:05.816331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5hfxn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:18:19.735668 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 15:18:19.735648102 +0000 UTC m=+475.916621863 I0918 15:18:19.736160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:18:19.736205 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 15:18:19.736196793 +0000 UTC m=+475.917170554 I0918 15:18:19.753342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:18:19.753542 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 15:18:19.753533367 +0000 UTC m=+475.934507128 I0918 15:18:20.016826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:18:20.049960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-84lng" condition "Approved" to 2026-09-18 15:18:20.049913381 +0000 UTC m=+476.230887162 I0918 15:18:20.095310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-84lng" condition "Ready" to 2026-09-18 15:18:20.095294397 +0000 UTC m=+476.276268158 I0918 15:18:20.126253 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:18:20.12623991 +0000 UTC m=+476.307213671 I0918 15:18:20.146304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:21:40.447154 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 15:21:40.447132439 +0000 UTC m=+676.628106210 I0918 15:21:40.448284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:21:40.448610 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 15:21:40.44859921 +0000 UTC m=+676.629572991 I0918 15:21:40.479897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:21:40.480124 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:21:40.480163 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 15:21:40.480155246 +0000 UTC m=+676.661129007 I0918 15:21:40.723994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:21:40.733388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9cx89" condition "Approved" to 2026-09-18 15:21:40.733376536 +0000 UTC m=+676.914350297 I0918 15:21:40.754627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9cx89" condition "Ready" to 2026-09-18 15:21:40.754617179 +0000 UTC m=+676.935590940 I0918 15:21:40.792820 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:21:40.792803488 +0000 UTC m=+676.973777249 I0918 15:21:40.811619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:22:20.597778 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 15:22:20.59775582 +0000 UTC m=+716.778729591 I0918 15:22:20.597854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:22:20.597949 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 15:22:20.597935017 +0000 UTC m=+716.778908818 I0918 15:22:20.623100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:22:20.623196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 15:22:20.623229 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 15:22:20.623221211 +0000 UTC m=+716.804194982 I0918 15:22:20.920991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:22:20.932991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ptpzm" condition "Approved" to 2026-09-18 15:22:20.932977949 +0000 UTC m=+717.113951720 I0918 15:22:20.953366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ptpzm" condition "Ready" to 2026-09-18 15:22:20.953347738 +0000 UTC m=+717.134321499 I0918 15:22:20.990251 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:22:20.990229261 +0000 UTC m=+717.171203022 I0918 15:22:21.008647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 15:22:21.008838 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 15:22:21.008832924 +0000 UTC m=+717.189806685 I0918 15:22:21.034760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"