I0918 02:23:50.467214 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0918 02:23:50.467371 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 02:23:50.467473 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 02:23:50.474775 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 02:23:50.475853 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0918 02:23:50.475907 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 02:23:50.476007 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 02:23:50.480395 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 02:23:50.495593 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 02:23:50.495833 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 02:23:50.500501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 02:23:50.504650 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 02:23:50.508940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 02:23:50.516230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 02:23:50.520445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0918 02:23:50.524379 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 02:23:50.524414 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 02:23:50.524413 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 02:23:50.524429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 02:23:50.528477 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 02:23:50.532254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 02:23:50.535602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 02:23:50.540467 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 02:23:50.540515 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 02:23:50.545017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 02:23:50.549184 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 02:23:50.553655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 02:23:50.557517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 02:23:50.561442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 02:23:50.565265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 02:23:50.569298 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 02:23:50.569328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 02:23:50.575738 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.576103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 02:23:50.579031 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.579401 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.598918 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.629024 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.652383 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.677537 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.698981 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.701114 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:50.722534 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:24:02.588928 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 02:24:02.588913106 +0000 UTC m=+12.174807786 I0918 02:24:03.329766 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 02:24:03.329748722 +0000 UTC m=+12.915643412 I0918 02:24:03.330205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:24:03.330297 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 02:24:03.330282772 +0000 UTC m=+12.916177452 E0918 02:24:03.347536 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:24:03.347639 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 02:24:03.347624362 +0000 UTC m=+12.933519042 E0918 02:24:03.347686 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:24:03.353847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:03.354267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:24:03.354470 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 02:24:03.354305752 +0000 UTC m=+12.940200442 E0918 02:24:03.367080 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0918 02:24:03.367227 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:24:03.367272 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:24:03.367321 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 02:24:03.403361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:03.410910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-npfnp" condition "Approved" to 2026-09-18 02:24:03.410894798 +0000 UTC m=+12.996789488 I0918 02:24:03.430395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-npfnp" condition "Ready" to 2026-09-18 02:24:03.430306116 +0000 UTC m=+13.016200806 I0918 02:24:03.454356 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:03.454344938 +0000 UTC m=+13.040239578 I0918 02:24:03.476603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:08.367948 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:08.367906263 +0000 UTC m=+17.953800943 I0918 02:24:33.336577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:24:33.336691 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 02:24:33.336665793 +0000 UTC m=+42.922560453 I0918 02:24:33.337371 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 02:24:33.337351094 +0000 UTC m=+42.923245794 I0918 02:24:33.350045 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 02:24:33.35003213 +0000 UTC m=+42.935926790 I0918 02:24:33.377585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:33.377650 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 02:24:33.37764293 +0000 UTC m=+42.963537580 I0918 02:24:33.478325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:33.510112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wv8th" condition "Approved" to 2026-09-18 02:24:33.510095268 +0000 UTC m=+43.095989918 I0918 02:24:33.541411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wv8th" condition "Ready" to 2026-09-18 02:24:33.541398544 +0000 UTC m=+43.127293204 I0918 02:24:33.568717 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:33.568705709 +0000 UTC m=+43.154600369 I0918 02:24:33.597769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:33.598576 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:33.598567242 +0000 UTC m=+43.184461922 I0918 02:24:33.623034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:33.626185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:33.626517 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:33.626509037 +0000 UTC m=+43.212403697 I0918 02:30:28.407024 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Ready" to 2026-09-18 02:30:28.406998003 +0000 UTC m=+397.992892683 I0918 02:30:28.407207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-161.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:30:28.407296 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Issuing" to 2026-09-18 02:30:28.407278039 +0000 UTC m=+397.993172799 I0918 02:30:28.438806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:28.438935 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Ready" to 2026-09-18 02:30:28.438921639 +0000 UTC m=+398.024816319 I0918 02:30:28.664567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:28.698571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-161.nip.io-tls-nsglv" condition "Approved" to 2026-09-18 02:30:28.698555695 +0000 UTC m=+398.284450335 I0918 02:30:28.732916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-161.nip.io-tls-nsglv" condition "Ready" to 2026-09-18 02:30:28.732896926 +0000 UTC m=+398.318791586 I0918 02:30:28.761090 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:30:28.761076091 +0000 UTC m=+398.346970731 I0918 02:30:28.779170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:28.780517 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:30:28.780503119 +0000 UTC m=+398.366397799 I0918 02:30:28.802076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:38.307070 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 02:31:38.307042564 +0000 UTC m=+467.892937244 I0918 02:31:38.307387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:38.307499 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 02:31:38.307486132 +0000 UTC m=+467.893380812 E0918 02:31:38.322748 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:31:38.322802 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 02:31:38.322791816 +0000 UTC m=+467.908686496 E0918 02:31:38.323098 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:31:38.326442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:38.326613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:38.326689 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 02:31:38.326679313 +0000 UTC m=+467.912573993 E0918 02:31:38.339245 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0918 02:31:38.339900 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:31:38.339955 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:31:38.340033 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0918 02:31:38.376369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:38.383936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xg979" condition "Approved" to 2026-09-18 02:31:38.383921864 +0000 UTC m=+467.969816524 I0918 02:31:38.401126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xg979" condition "Ready" to 2026-09-18 02:31:38.401114041 +0000 UTC m=+467.987008701 I0918 02:31:38.434465 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:38.434446758 +0000 UTC m=+468.020341448 I0918 02:31:38.453088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:43.339753 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:43.339738924 +0000 UTC m=+472.925633604 I0918 02:32:27.180532 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 02:32:27.1805131 +0000 UTC m=+516.766407740 I0918 02:32:27.181611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:27.181654 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 02:32:27.181638708 +0000 UTC m=+516.767533358 I0918 02:32:27.186997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:27.187028 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 02:32:27.187020768 +0000 UTC m=+516.772915418 I0918 02:32:27.187469 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 02:32:27.187465294 +0000 UTC m=+516.773359944 I0918 02:32:27.187728 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 02:32:27.187725158 +0000 UTC m=+516.773619808 I0918 02:32:27.188028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:27.188042 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 02:32:27.188039344 +0000 UTC m=+516.773933994 I0918 02:32:27.239455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:27.239615 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 02:32:27.239526687 +0000 UTC m=+516.825421337 I0918 02:32:27.247724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:27.247812 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 02:32:27.247789834 +0000 UTC m=+516.833684474 I0918 02:32:27.249173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:27.249215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:27.249671 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 02:32:27.249666375 +0000 UTC m=+516.835561045 I0918 02:32:27.400476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:27.425377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zr6th" condition "Approved" to 2026-09-18 02:32:27.425359746 +0000 UTC m=+517.011254406 I0918 02:32:27.461618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zr6th" condition "Ready" to 2026-09-18 02:32:27.461610216 +0000 UTC m=+517.047504866 I0918 02:32:27.496602 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:27.496594596 +0000 UTC m=+517.082489246 I0918 02:32:27.525715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vjc9k" condition "Approved" to 2026-09-18 02:32:27.525706217 +0000 UTC m=+517.111600867 I0918 02:32:27.535909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:27.536218 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:27.536213482 +0000 UTC m=+517.122108142 I0918 02:32:27.546178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vjc9k" condition "Ready" to 2026-09-18 02:32:27.546166906 +0000 UTC m=+517.132061556 I0918 02:32:27.553036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:27.553360 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:27.553351746 +0000 UTC m=+517.139246396 I0918 02:32:27.580913 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:27.580904013 +0000 UTC m=+517.166798653 I0918 02:32:27.615133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:27.615849 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:27.615843021 +0000 UTC m=+517.201737671 I0918 02:32:27.647595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0918 02:32:27.903443 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-nqk4v\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0918 02:32:27.952917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dbcjt" condition "Approved" to 2026-09-18 02:32:27.952893624 +0000 UTC m=+517.538788264 I0918 02:32:28.108749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dbcjt" condition "Ready" to 2026-09-18 02:32:28.108734635 +0000 UTC m=+517.694629285 I0918 02:32:28.601347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:28.651018 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:28.651007321 +0000 UTC m=+518.236901971 I0918 02:32:28.755547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:28.756138 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:28.756127481 +0000 UTC m=+518.342022141 I0918 02:32:28.952691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:34.094938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:34.094970 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" condition "Issuing" to 2026-09-18 02:32:34.094963539 +0000 UTC m=+523.680858199 I0918 02:32:34.095496 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" condition "Ready" to 2026-09-18 02:32:34.095489478 +0000 UTC m=+523.681384138 I0918 02:32:34.114476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mn79f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:34.114552 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" condition "Ready" to 2026-09-18 02:32:34.114543332 +0000 UTC m=+523.700438012 I0918 02:32:34.528483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mn79f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:34.571598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mn79f-zg5hm" condition "Approved" to 2026-09-18 02:32:34.571570615 +0000 UTC m=+524.157465275 I0918 02:32:34.603997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mn79f-zg5hm" condition "Ready" to 2026-09-18 02:32:34.603986419 +0000 UTC m=+524.189881059 I0918 02:32:34.666343 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:34.666331526 +0000 UTC m=+524.252226176 I0918 02:32:34.684004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mn79f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:34.684546 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:34.684539487 +0000 UTC m=+524.270434137 I0918 02:32:34.715236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn79f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mn79f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:51.147383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:51.147416 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 02:32:51.147409493 +0000 UTC m=+540.733304143 I0918 02:32:51.147569 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 02:32:51.147544565 +0000 UTC m=+540.733439225 I0918 02:32:51.162826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:51.162879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:32:51.162890 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 02:32:51.162886155 +0000 UTC m=+540.748780805 I0918 02:32:51.284332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-brp5x" condition "Approved" to 2026-09-18 02:32:51.284318544 +0000 UTC m=+540.870213194 I0918 02:32:51.305845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-brp5x" condition "Ready" to 2026-09-18 02:32:51.305835774 +0000 UTC m=+540.891730414 I0918 02:32:51.338581 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:32:51.338569588 +0000 UTC m=+540.924464228 I0918 02:32:51.373341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:51.391638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:32:51.442692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:08.164809 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 02:36:08.16475801 +0000 UTC m=+737.750652670 I0918 02:36:08.165199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:36:08.165250 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 02:36:08.165244148 +0000 UTC m=+737.751138808 I0918 02:36:08.183917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:08.183982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:36:08.184000 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 02:36:08.183994062 +0000 UTC m=+737.769888722 I0918 02:36:08.335447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z8gqc" condition "Approved" to 2026-09-18 02:36:08.33543581 +0000 UTC m=+737.921330480 I0918 02:36:08.362854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z8gqc" condition "Ready" to 2026-09-18 02:36:08.362843921 +0000 UTC m=+737.948738581 I0918 02:36:08.400042 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:36:08.400032398 +0000 UTC m=+737.985927058 I0918 02:36:08.425763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:08.426126 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:36:08.426120067 +0000 UTC m=+738.012014737 I0918 02:36:08.429465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:08.452244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:50.339032 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 02:36:50.338995238 +0000 UTC m=+779.924889888 I0918 02:36:50.339340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:36:50.339370 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 02:36:50.339365712 +0000 UTC m=+779.925260362 I0918 02:36:50.365705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:50.365859 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 02:36:50.365845909 +0000 UTC m=+779.951740599 I0918 02:36:50.545175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:36:50.589731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-sztxm" condition "Approved" to 2026-09-18 02:36:50.589716293 +0000 UTC m=+780.175610963 I0918 02:36:50.613931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-sztxm" condition "Ready" to 2026-09-18 02:36:50.61390559 +0000 UTC m=+780.199800270 I0918 02:36:50.649317 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:36:50.649305767 +0000 UTC m=+780.235200427 I0918 02:36:50.679021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"