I0918 02:23:31.829981 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0918 02:23:31.830192 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 02:23:31.830396 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 02:23:31.835317 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 02:23:31.835795 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0918 02:23:31.835897 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 02:23:31.836014 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 02:23:31.838541 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 02:23:31.852976 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 02:23:31.856531 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 02:23:31.856656 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 02:23:31.856587 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 02:23:31.861667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 02:23:31.863951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 02:23:31.865874 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 02:23:31.865916 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 02:23:31.867881 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 02:23:31.870074 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 02:23:31.871935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 02:23:31.876142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 02:23:31.879822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 02:23:31.882226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 02:23:31.885167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 02:23:31.888265 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 02:23:31.888309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 02:23:31.891077 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 02:23:31.893151 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 02:23:31.895109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 02:23:31.897873 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 02:23:31.897932 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 02:23:31.897904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0918 02:23:31.903834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 02:23:31.907522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 02:23:31.910646 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:31.912902 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:31.913166 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:31.932297 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:31.944560 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:31.963739 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:32.005741 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:32.007320 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:32.017551 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:32.033858 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:23:46.868227 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 02:23:46.868214625 +0000 UTC m=+15.075963187 I0918 02:23:47.557902 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 02:23:47.557865072 +0000 UTC m=+15.765613664 I0918 02:23:47.558211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:23:47.558282 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 02:23:47.558275481 +0000 UTC m=+15.766024043 E0918 02:23:47.591729 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:23:47.592081 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 02:23:47.592065629 +0000 UTC m=+15.799814231 E0918 02:23:47.592369 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:23:47.608950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:23:47.609101 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:23:47.609138 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 02:23:47.60912836 +0000 UTC m=+15.816876962 E0918 02:23:47.619181 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0918 02:23:47.619305 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:23:47.619356 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:23:47.619404 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 02:23:47.663250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qgxjx" condition "Approved" to 2026-09-18 02:23:47.663233375 +0000 UTC m=+15.870981967 I0918 02:23:47.687130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qgxjx" condition "Ready" to 2026-09-18 02:23:47.687118685 +0000 UTC m=+15.894867257 I0918 02:23:47.719239 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:23:47.719224328 +0000 UTC m=+15.926972930 I0918 02:23:47.738055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:23:47.738757 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:23:47.73874831 +0000 UTC m=+15.946496882 I0918 02:23:47.754435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:23:52.620476 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:23:52.620432519 +0000 UTC m=+20.828181131 I0918 02:24:18.844250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:24:18.844304 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 02:24:18.844297055 +0000 UTC m=+47.052045617 I0918 02:24:18.844359 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 02:24:18.844340576 +0000 UTC m=+47.052089148 I0918 02:24:18.855978 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 02:24:18.855967887 +0000 UTC m=+47.063716449 I0918 02:24:18.867926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:18.870505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:24:18.870545 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 02:24:18.870537902 +0000 UTC m=+47.078286474 I0918 02:24:19.430669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nzkfl" condition "Approved" to 2026-09-18 02:24:19.43065369 +0000 UTC m=+47.638402282 I0918 02:24:19.553678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nzkfl" condition "Ready" to 2026-09-18 02:24:19.553661284 +0000 UTC m=+47.761409846 I0918 02:24:19.621459 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:19.621449385 +0000 UTC m=+47.829197957 I0918 02:24:19.662312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:19.662591 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:24:19.662584982 +0000 UTC m=+47.870333544 I0918 02:24:19.691038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:24:19.701524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:08.596211 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready" to 2026-09-18 02:29:08.596177097 +0000 UTC m=+336.803925659 I0918 02:29:08.596265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-59.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:29:08.596295 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Issuing" to 2026-09-18 02:29:08.59628868 +0000 UTC m=+336.804037252 I0918 02:29:08.611505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:08.611564 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready" to 2026-09-18 02:29:08.61155824 +0000 UTC m=+336.819306812 I0918 02:29:08.871614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:08.898706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-59.nip.io-tls-hw5hs" condition "Approved" to 2026-09-18 02:29:08.898692573 +0000 UTC m=+337.106441135 I0918 02:29:08.928327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-59.nip.io-tls-hw5hs" condition "Ready" to 2026-09-18 02:29:08.928317552 +0000 UTC m=+337.136066124 I0918 02:29:08.956038 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:08.956030131 +0000 UTC m=+337.163778683 I0918 02:29:08.989619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:08.990021 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:08.990015155 +0000 UTC m=+337.197763717 I0918 02:29:09.008240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:14.832838 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 02:30:14.832797275 +0000 UTC m=+403.040545837 I0918 02:30:14.832926 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:30:14.832966 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 02:30:14.832951048 +0000 UTC m=+403.040699620 I0918 02:30:14.849125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:14.849254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:30:14.849348 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 02:30:14.849335623 +0000 UTC m=+403.057084265 E0918 02:30:14.849896 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:30:14.849950 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 02:30:14.849940255 +0000 UTC m=+403.057688847 E0918 02:30:14.850035 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:30:14.863369 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0918 02:30:14.863616 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:30:14.863645 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:30:14.863689 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0918 02:30:14.887837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:14.890608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hvv2j" condition "Approved" to 2026-09-18 02:30:14.890602022 +0000 UTC m=+403.098350584 I0918 02:30:14.902301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hvv2j" condition "Ready" to 2026-09-18 02:30:14.902292483 +0000 UTC m=+403.110041045 I0918 02:30:14.921197 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:30:14.921183037 +0000 UTC m=+403.128931599 I0918 02:30:14.932749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:30:19.863880 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:30:19.863862838 +0000 UTC m=+408.071611430 I0918 02:31:00.443070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:00.443101 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 02:31:00.443096349 +0000 UTC m=+448.650844911 I0918 02:31:00.452187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:00.452256 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 02:31:00.452248524 +0000 UTC m=+448.659997086 I0918 02:31:00.452665 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 02:31:00.452659281 +0000 UTC m=+448.660407843 I0918 02:31:00.453406 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 02:31:00.453390245 +0000 UTC m=+448.661138887 I0918 02:31:00.456164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:00.456195 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 02:31:00.456188758 +0000 UTC m=+448.663937320 I0918 02:31:00.456472 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 02:31:00.456469204 +0000 UTC m=+448.664217766 I0918 02:31:00.538157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:00.538254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:00.538310 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 02:31:00.538304081 +0000 UTC m=+448.746052643 I0918 02:31:00.538660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:00.550080 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 02:31:00.550073055 +0000 UTC m=+448.757821617 I0918 02:31:00.550390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:00.550432 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 02:31:00.550429712 +0000 UTC m=+448.758178284 I0918 02:31:00.748208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7f286" condition "Approved" to 2026-09-18 02:31:00.748195246 +0000 UTC m=+448.955943808 I0918 02:31:00.785493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7f286" condition "Ready" to 2026-09-18 02:31:00.785482866 +0000 UTC m=+448.993231428 I0918 02:31:00.853362 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:00.853352407 +0000 UTC m=+449.061100969 I0918 02:31:00.933940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:00.934211 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:00.934205026 +0000 UTC m=+449.141953588 I0918 02:31:00.934736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0918 02:31:00.977186 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-dvf8j\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0918 02:31:00.977280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:00.977486 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:00.97747922 +0000 UTC m=+449.185227782 I0918 02:31:00.986552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vmcmm" condition "Approved" to 2026-09-18 02:31:00.986539962 +0000 UTC m=+449.194288524 I0918 02:31:01.011122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vmcmm" condition "Ready" to 2026-09-18 02:31:01.011098639 +0000 UTC m=+449.218847201 I0918 02:31:01.036249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:01.051263 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:01.051252713 +0000 UTC m=+449.259001275 I0918 02:31:01.083974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:01.084385 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:01.084376163 +0000 UTC m=+449.292124735 I0918 02:31:01.145090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lchxq" condition "Approved" to 2026-09-18 02:31:01.145080397 +0000 UTC m=+449.352828959 I0918 02:31:01.395047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lchxq" condition "Ready" to 2026-09-18 02:31:01.395035501 +0000 UTC m=+449.602784073 I0918 02:31:01.738257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:01.799146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:02.044624 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:02.044609013 +0000 UTC m=+450.252357615 I0918 02:31:02.326012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:02.326646 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:02.326634662 +0000 UTC m=+450.534383254 I0918 02:31:02.373852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:02.483673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:10.610046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bdt99-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:10.610100 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bdt99-tls" condition "Issuing" to 2026-09-18 02:31:10.610088538 +0000 UTC m=+458.817837100 I0918 02:31:10.610343 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bdt99-tls" condition "Ready" to 2026-09-18 02:31:10.610318604 +0000 UTC m=+458.818067166 I0918 02:31:10.626197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bdt99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bdt99-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:10.626282 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bdt99-tls" condition "Ready" to 2026-09-18 02:31:10.626272805 +0000 UTC m=+458.834021377 I0918 02:31:10.746754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bdt99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bdt99-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:10.786423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bdt99-rdjvh" condition "Approved" to 2026-09-18 02:31:10.78639991 +0000 UTC m=+458.994148472 I0918 02:31:10.806911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bdt99-rdjvh" condition "Ready" to 2026-09-18 02:31:10.806900397 +0000 UTC m=+459.014648959 I0918 02:31:10.841738 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bdt99-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:10.841708365 +0000 UTC m=+459.049456927 I0918 02:31:10.863926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bdt99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bdt99-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:23.985911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:23.985935 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 02:31:23.985930005 +0000 UTC m=+472.193678567 I0918 02:31:23.986160 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 02:31:23.986157239 +0000 UTC m=+472.193905801 I0918 02:31:24.002591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:31:24.002658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:31:24.002674 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 02:31:24.002669459 +0000 UTC m=+472.210418031 I0918 02:31:24.226516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dpcvc" condition "Approved" to 2026-09-18 02:31:24.226497858 +0000 UTC m=+472.434246460 I0918 02:31:24.251135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dpcvc" condition "Ready" to 2026-09-18 02:31:24.251121119 +0000 UTC m=+472.458869691 I0918 02:31:24.278435 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:31:24.278423741 +0000 UTC m=+472.486172303 I0918 02:31:24.293660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:34:37.820333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:34:37.820451 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 02:34:37.820403505 +0000 UTC m=+666.028152107 I0918 02:34:37.820559 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 02:34:37.820553047 +0000 UTC m=+666.028301619 I0918 02:34:37.875077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:34:37.883849 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 02:34:37.883836477 +0000 UTC m=+666.091585049 I0918 02:34:38.037717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:34:38.080522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mwfpc" condition "Approved" to 2026-09-18 02:34:38.080507546 +0000 UTC m=+666.288256128 I0918 02:34:38.101016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mwfpc" condition "Ready" to 2026-09-18 02:34:38.100990695 +0000 UTC m=+666.308739257 I0918 02:34:38.131556 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:34:38.13153563 +0000 UTC m=+666.339284232 I0918 02:34:38.154851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:34:38.207629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:35:17.972486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:35:17.972618 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 02:35:17.972603581 +0000 UTC m=+706.180352143 I0918 02:35:17.972547 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 02:35:17.972525828 +0000 UTC m=+706.180274420 I0918 02:35:18.006893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:35:18.006972 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:35:18.006988 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 02:35:18.00698169 +0000 UTC m=+706.214730262 I0918 02:35:18.683051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h6cc8" condition "Approved" to 2026-09-18 02:35:18.683042773 +0000 UTC m=+706.890791335 I0918 02:35:18.702097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h6cc8" condition "Ready" to 2026-09-18 02:35:18.702089032 +0000 UTC m=+706.909837594 I0918 02:35:18.729620 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:35:18.729607775 +0000 UTC m=+706.937356327 I0918 02:35:18.760856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:35:18.761186 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:35:18.761179629 +0000 UTC m=+706.968928201 I0918 02:35:18.775665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:35:18.776695 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:35:18.776687562 +0000 UTC m=+706.984436114