I0922 01:59:11.487938 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0922 01:59:11.488078 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0922 01:59:11.488270 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0922 01:59:11.495544 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0922 01:59:11.496131 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0922 01:59:11.496226 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0922 01:59:11.496226 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0922 01:59:11.500068 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0922 01:59:11.515512 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0922 01:59:11.515803 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0922 01:59:11.515864 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0922 01:59:11.520478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0922 01:59:11.524982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0922 01:59:11.530883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0922 01:59:11.534533 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0922 01:59:11.538843 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0922 01:59:11.538877 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0922 01:59:11.538882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0922 01:59:11.542740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0922 01:59:11.546662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0922 01:59:11.549660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0922 01:59:11.553740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0922 01:59:11.558193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0922 01:59:11.562296 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0922 01:59:11.562388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0922 01:59:11.562470 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0922 01:59:11.566518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0922 01:59:11.570528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0922 01:59:11.574572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0922 01:59:11.579315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0922 01:59:11.583303 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0922 01:59:11.587144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0922 01:59:11.594397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0922 01:59:11.598483 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.599056 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.599236 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.599977 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.614965 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.663232 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.674706 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.693603 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.712349 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:11.722868 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0922 01:59:22.794844 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-22 01:59:22.794824983 +0000 UTC m=+11.342060644 I0922 01:59:23.488375 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-22 01:59:23.48835524 +0000 UTC m=+12.035590911 I0922 01:59:23.488425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:59:23.488666 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-22 01:59:23.488655704 +0000 UTC m=+12.035891395 E0922 01:59:23.503211 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 01:59:23.503300 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-22 01:59:23.503290762 +0000 UTC m=+12.050526413 E0922 01:59:23.503330 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 01:59:23.508851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:23.509106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:59:23.509200 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-22 01:59:23.509188027 +0000 UTC m=+12.056423688 E0922 01:59:23.522725 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0922 01:59:23.523499 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:59:23.523560 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:59:23.525057 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0922 01:59:23.557329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:23.564572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sm8f4" condition "Approved" to 2026-09-22 01:59:23.564561006 +0000 UTC m=+12.111796657 I0922 01:59:23.580695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sm8f4" condition "Ready" to 2026-09-22 01:59:23.580681896 +0000 UTC m=+12.127917547 I0922 01:59:23.612994 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:59:23.612981868 +0000 UTC m=+12.160217479 I0922 01:59:23.633245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:23.680140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:28.523523 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:59:28.523437277 +0000 UTC m=+17.070672928 I0922 01:59:49.070700 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-22 01:59:49.070656348 +0000 UTC m=+37.617891999 I0922 01:59:49.071259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:59:49.071291 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-22 01:59:49.071284632 +0000 UTC m=+37.618520283 I0922 01:59:49.091299 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-22 01:59:49.091283171 +0000 UTC m=+37.638518832 I0922 01:59:49.103423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:49.103474 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:59:49.103491 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-22 01:59:49.103485824 +0000 UTC m=+37.650721455 I0922 01:59:49.347660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:49.363239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6nwjk" condition "Approved" to 2026-09-22 01:59:49.363230619 +0000 UTC m=+37.910466240 I0922 01:59:49.384826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6nwjk" condition "Ready" to 2026-09-22 01:59:49.384820654 +0000 UTC m=+37.932056275 I0922 01:59:49.410795 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:59:49.410784242 +0000 UTC m=+37.958019873 I0922 01:59:49.428120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:49.428324 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:59:49.428318271 +0000 UTC m=+37.975553882 I0922 01:59:49.453055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:46.415758 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Ready" to 2026-09-22 02:04:46.415673028 +0000 UTC m=+334.962908689 I0922 02:04:46.416490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-166.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:04:46.416604 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Issuing" to 2026-09-22 02:04:46.416569872 +0000 UTC m=+334.963805523 I0922 02:04:46.432387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:46.432444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-166.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:04:46.432460 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Issuing" to 2026-09-22 02:04:46.432453901 +0000 UTC m=+334.979689522 I0922 02:04:46.621821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-166.nip.io-tls-zsdmr" condition "Approved" to 2026-09-22 02:04:46.621810328 +0000 UTC m=+335.169045959 I0922 02:04:46.660143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-166.nip.io-tls-zsdmr" condition "Ready" to 2026-09-22 02:04:46.660132481 +0000 UTC m=+335.207368112 I0922 02:04:46.704939 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:04:46.704925476 +0000 UTC m=+335.252161137 I0922 02:04:46.729866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:46.733337 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:04:46.733324782 +0000 UTC m=+335.280560433 I0922 02:04:46.738760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:46.754346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:46.754865 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-166.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:04:46.754852701 +0000 UTC m=+335.302088352 I0922 02:04:46.755043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-166.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-166.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:57.881448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:05:57.881491 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-22 02:05:57.881481853 +0000 UTC m=+406.428717514 I0922 02:05:57.881651 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 02:05:57.88163682 +0000 UTC m=+406.428872441 E0922 02:05:57.893456 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 02:05:57.893511 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-22 02:05:57.893502652 +0000 UTC m=+406.440738303 E0922 02:05:57.893561 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 02:05:57.899875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:57.899967 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 02:05:57.899956156 +0000 UTC m=+406.447191807 E0922 02:05:57.918612 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0922 02:05:57.919211 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 02:05:57.919259 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 02:05:57.919318 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0922 02:05:57.920756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:57.946484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t42gk" condition "Approved" to 2026-09-22 02:05:57.946468039 +0000 UTC m=+406.493703690 I0922 02:05:57.963329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t42gk" condition "Ready" to 2026-09-22 02:05:57.963314197 +0000 UTC m=+406.510549848 I0922 02:05:57.993063 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:05:57.993050955 +0000 UTC m=+406.540286576 I0922 02:05:58.020995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:58.021617 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:05:58.021606619 +0000 UTC m=+406.568842270 I0922 02:05:58.022709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:58.054655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:58.054971 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:05:58.054961074 +0000 UTC m=+406.602196705 I0922 02:06:02.920507 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:02.920492934 +0000 UTC m=+411.467728585 I0922 02:06:42.900778 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-22 02:06:42.900733512 +0000 UTC m=+451.447969133 I0922 02:06:42.900815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:42.900903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:42.900925 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-22 02:06:42.900922161 +0000 UTC m=+451.448157782 I0922 02:06:42.900874 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-22 02:06:42.900868538 +0000 UTC m=+451.448104159 I0922 02:06:42.901020 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-22 02:06:42.901017835 +0000 UTC m=+451.448253456 I0922 02:06:42.906575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:42.906622 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-22 02:06:42.906617606 +0000 UTC m=+451.453853217 I0922 02:06:42.906854 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-22 02:06:42.906841727 +0000 UTC m=+451.454077348 I0922 02:06:42.939333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:42.939378 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-22 02:06:42.939373758 +0000 UTC m=+451.486609379 I0922 02:06:42.939432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:42.939510 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:42.939540 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-22 02:06:42.939533946 +0000 UTC m=+451.486769577 I0922 02:06:42.942408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:42.942451 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-22 02:06:42.942446056 +0000 UTC m=+451.489681677 I0922 02:06:43.035021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:43.138728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p629c" condition "Approved" to 2026-09-22 02:06:43.138719673 +0000 UTC m=+451.685955294 I0922 02:06:43.148874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:43.157460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-54zfs" condition "Approved" to 2026-09-22 02:06:43.157454899 +0000 UTC m=+451.704690550 I0922 02:06:43.171707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-p629c" condition "Ready" to 2026-09-22 02:06:43.171699218 +0000 UTC m=+451.718934829 I0922 02:06:43.171714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-54zfs" condition "Ready" to 2026-09-22 02:06:43.171705188 +0000 UTC m=+451.718940809 I0922 02:06:43.194761 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:43.194753843 +0000 UTC m=+451.741989454 I0922 02:06:43.196296 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:43.196292277 +0000 UTC m=+451.743527898 I0922 02:06:43.221169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:43.221593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:43.661838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:43.712381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:43.870351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zw6xl" condition "Approved" to 2026-09-22 02:06:43.870338407 +0000 UTC m=+452.417574058 I0922 02:06:43.925559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zw6xl" condition "Ready" to 2026-09-22 02:06:43.925522115 +0000 UTC m=+452.472757766 I0922 02:06:44.416989 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:44.416975507 +0000 UTC m=+452.964211158 I0922 02:06:44.516327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:44.516766 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:44.516758317 +0000 UTC m=+453.063993968 I0922 02:06:44.768345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:44.820141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:51.297698 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:51.297777 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls" condition "Issuing" to 2026-09-22 02:06:51.297770339 +0000 UTC m=+459.845005960 I0922 02:06:51.297857 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls" condition "Ready" to 2026-09-22 02:06:51.297845223 +0000 UTC m=+459.845080844 I0922 02:06:51.314495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:51.314544 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls" condition "Ready" to 2026-09-22 02:06:51.314540466 +0000 UTC m=+459.861776087 I0922 02:06:51.422455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:51.450920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tsjcl-4pkmj" condition "Approved" to 2026-09-22 02:06:51.450911351 +0000 UTC m=+459.998146962 I0922 02:06:51.473880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tsjcl-4pkmj" condition "Ready" to 2026-09-22 02:06:51.47387222 +0000 UTC m=+460.021107831 I0922 02:06:51.496419 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:51.496410179 +0000 UTC m=+460.043645800 I0922 02:06:51.516246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tsjcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:07:03.357384 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-22 02:07:03.357370513 +0000 UTC m=+471.904606144 I0922 02:07:03.357412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:07:03.357904 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-22 02:07:03.357887748 +0000 UTC m=+471.905123389 I0922 02:07:03.379845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:07:03.380047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:07:03.380137 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-22 02:07:03.380131324 +0000 UTC m=+471.927366945 I0922 02:07:03.605444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:07:03.610830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bpmkz" condition "Approved" to 2026-09-22 02:07:03.610819007 +0000 UTC m=+472.158054638 I0922 02:07:03.636844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bpmkz" condition "Ready" to 2026-09-22 02:07:03.636822908 +0000 UTC m=+472.184058529 I0922 02:07:03.665038 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:07:03.665027757 +0000 UTC m=+472.212263378 I0922 02:07:03.680186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:07:03.719946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:10:12.862063 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-22 02:10:12.862009236 +0000 UTC m=+661.409244887 I0922 02:10:12.862065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:10:12.862599 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-22 02:10:12.862588913 +0000 UTC m=+661.409824564 I0922 02:10:12.880320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:10:12.880393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:10:12.880427 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-22 02:10:12.880417869 +0000 UTC m=+661.427653530 I0922 02:10:13.129145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lvx6w" condition "Approved" to 2026-09-22 02:10:13.129124193 +0000 UTC m=+661.676359814 I0922 02:10:13.150480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lvx6w" condition "Ready" to 2026-09-22 02:10:13.150469994 +0000 UTC m=+661.697705615 I0922 02:10:13.191932 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:10:13.191852003 +0000 UTC m=+661.739087614 I0922 02:10:13.222117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:10:54.084638 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-22 02:10:54.08461711 +0000 UTC m=+702.631852771 I0922 02:10:54.084850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:10:54.084894 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-22 02:10:54.084887781 +0000 UTC m=+702.632123412 I0922 02:10:54.110076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:10:54.110204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:10:54.110226 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-22 02:10:54.110217489 +0000 UTC m=+702.657453150 I0922 02:10:54.448806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qqxzj" condition "Approved" to 2026-09-22 02:10:54.448787122 +0000 UTC m=+702.996022773 I0922 02:10:54.470642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qqxzj" condition "Ready" to 2026-09-22 02:10:54.470633942 +0000 UTC m=+703.017869563 I0922 02:10:54.509548 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:10:54.509532252 +0000 UTC m=+703.056767873 I0922 02:10:54.538465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"