I0824 19:38:02.884615 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0824 19:38:02.884804 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0824 19:38:02.884873 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0824 19:38:02.891304 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0824 19:38:02.891746 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0824 19:38:02.891770 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0824 19:38:02.891860 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0824 19:38:02.894583 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0824 19:38:02.911192 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0824 19:38:02.915585 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0824 19:38:02.919537 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0824 19:38:02.919563 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0824 19:38:02.919599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0824 19:38:02.924856 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0824 19:38:02.927625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0824 19:38:02.930124 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0824 19:38:02.932572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0824 19:38:02.935397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0824 19:38:02.937332 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0824 19:38:02.937401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0824 19:38:02.939278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0824 19:38:02.944426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0824 19:38:02.947438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0824 19:38:02.950192 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0824 19:38:02.950225 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0824 19:38:02.950263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0824 19:38:02.953917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0824 19:38:02.956658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0824 19:38:02.960578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0824 19:38:02.963818 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0824 19:38:02.963918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0824 19:38:02.966520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0824 19:38:02.970837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0824 19:38:02.973006 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:02.973226 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:02.976121 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:02.990933 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:03.011316 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:03.024101 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:03.037206 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:03.055243 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:03.076325 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:03.078937 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0824 19:38:20.607830 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-24 19:38:20.607807385 +0000 UTC m=+17.753140238 I0824 19:38:21.323898 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-24 19:38:21.323886452 +0000 UTC m=+18.469219305 I0824 19:38:21.324515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:38:21.324621 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-24 19:38:21.32460765 +0000 UTC m=+18.469940523 E0824 19:38:21.347953 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 19:38:21.348036 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-24 19:38:21.348026301 +0000 UTC m=+18.493359184 E0824 19:38:21.348068 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 19:38:21.353988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:38:21.354153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:38:21.354201 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-24 19:38:21.354175251 +0000 UTC m=+18.499508114 E0824 19:38:21.374597 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0824 19:38:21.374857 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 19:38:21.374893 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 19:38:21.374958 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0824 19:38:21.422970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-msm8g" condition "Approved" to 2026-08-24 19:38:21.422954651 +0000 UTC m=+18.568287524 I0824 19:38:21.443294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-msm8g" condition "Ready" to 2026-08-24 19:38:21.443276688 +0000 UTC m=+18.588609571 I0824 19:38:21.470146 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:38:21.470132293 +0000 UTC m=+18.615465146 I0824 19:38:21.512252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:38:21.512792 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:38:21.512781545 +0000 UTC m=+18.658114428 I0824 19:38:21.514238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:38:21.534120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:38:26.375841 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:38:26.375822323 +0000 UTC m=+23.521155206 I0824 19:38:48.690277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:38:48.690260 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-24 19:38:48.690207198 +0000 UTC m=+45.835540071 I0824 19:38:48.690320 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-24 19:38:48.690312671 +0000 UTC m=+45.835645524 I0824 19:38:48.700535 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-24 19:38:48.700523864 +0000 UTC m=+45.845856707 I0824 19:38:48.718867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:38:48.718928 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-24 19:38:48.718920743 +0000 UTC m=+45.864253586 I0824 19:38:48.851744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:38:48.890588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rdbn9" condition "Approved" to 2026-08-24 19:38:48.890577706 +0000 UTC m=+46.035910559 I0824 19:38:48.919314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rdbn9" condition "Ready" to 2026-08-24 19:38:48.919303142 +0000 UTC m=+46.064635995 I0824 19:38:48.953414 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:38:48.953399192 +0000 UTC m=+46.098732045 I0824 19:38:48.978788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:43:04.279313 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-74.nip.io-tls" condition "Ready" to 2026-08-24 19:43:04.279297154 +0000 UTC m=+301.424629997 I0824 19:43:04.280737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:43:04.280770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-74.nip.io-tls" condition "Issuing" to 2026-08-24 19:43:04.280762483 +0000 UTC m=+301.426095366 I0824 19:43:04.317619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:43:04.318006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:43:04.318058 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-74.nip.io-tls" condition "Issuing" to 2026-08-24 19:43:04.318049593 +0000 UTC m=+301.463382436 I0824 19:43:04.512622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:43:04.525005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-74.nip.io-tls-bpbxm" condition "Approved" to 2026-08-24 19:43:04.524994624 +0000 UTC m=+301.670327477 I0824 19:43:04.561547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-74.nip.io-tls-bpbxm" condition "Ready" to 2026-08-24 19:43:04.561538168 +0000 UTC m=+301.706871011 I0824 19:43:04.593987 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:43:04.593971607 +0000 UTC m=+301.739304460 I0824 19:43:04.616646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:43:04.617070 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:43:04.617063574 +0000 UTC m=+301.762396427 I0824 19:43:04.634557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:43:04.640839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:08.514183 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-24 19:44:08.514160497 +0000 UTC m=+365.659493380 I0824 19:44:08.514205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:44:08.514333 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-24 19:44:08.514323961 +0000 UTC m=+365.659656804 E0824 19:44:08.529198 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 19:44:08.529229 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-24 19:44:08.529223177 +0000 UTC m=+365.674556030 E0824 19:44:08.529272 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 19:44:08.534330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:08.534419 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-24 19:44:08.53441171 +0000 UTC m=+365.679744553 E0824 19:44:08.546871 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0824 19:44:08.547282 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 19:44:08.547332 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 19:44:08.547451 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0824 19:44:08.553363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:08.553439 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-24 19:44:08.553431116 +0000 UTC m=+365.698763959 I0824 19:44:08.557372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:08.567237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sv7d8" condition "Approved" to 2026-08-24 19:44:08.56722646 +0000 UTC m=+365.712559303 I0824 19:44:08.580279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sv7d8" condition "Ready" to 2026-08-24 19:44:08.580269202 +0000 UTC m=+365.725602045 I0824 19:44:08.605815 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:44:08.60579965 +0000 UTC m=+365.751132493 I0824 19:44:08.626105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:08.671451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:13.547850 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:44:13.547838876 +0000 UTC m=+370.693171719 I0824 19:44:55.424204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:44:55.424252 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-24 19:44:55.424247315 +0000 UTC m=+412.569580158 I0824 19:44:55.424514 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-24 19:44:55.424510932 +0000 UTC m=+412.569843775 I0824 19:44:55.424660 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-24 19:44:55.424656895 +0000 UTC m=+412.569989738 I0824 19:44:55.424849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:44:55.424862 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-24 19:44:55.424859931 +0000 UTC m=+412.570192774 I0824 19:44:55.425013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:44:55.425027 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-24 19:44:55.425024476 +0000 UTC m=+412.570357319 I0824 19:44:55.425183 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-24 19:44:55.42518045 +0000 UTC m=+412.570513283 I0824 19:44:55.459111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:55.459166 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-24 19:44:55.459161442 +0000 UTC m=+412.604494285 I0824 19:44:55.472148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:55.472565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:44:55.472594 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-24 19:44:55.472587521 +0000 UTC m=+412.617920374 I0824 19:44:55.482945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:55.483113 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-24 19:44:55.483106548 +0000 UTC m=+412.628439401 I0824 19:44:55.709629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:55.730519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-djwxt" condition "Approved" to 2026-08-24 19:44:55.730508531 +0000 UTC m=+412.875841374 I0824 19:44:55.753378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-djwxt" condition "Ready" to 2026-08-24 19:44:55.753368809 +0000 UTC m=+412.898701652 I0824 19:44:55.815354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pcxtv" condition "Approved" to 2026-08-24 19:44:55.815343148 +0000 UTC m=+412.960675981 I0824 19:44:55.827772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:55.882381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pcxtv" condition "Ready" to 2026-08-24 19:44:55.882370696 +0000 UTC m=+413.027703559 I0824 19:44:55.905708 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:44:55.905694405 +0000 UTC m=+413.051027258 I0824 19:44:55.931227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f52tk" condition "Approved" to 2026-08-24 19:44:55.931216955 +0000 UTC m=+413.076549808 I0824 19:44:56.092042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f52tk" condition "Ready" to 2026-08-24 19:44:56.092029601 +0000 UTC m=+413.237362444 I0824 19:44:56.093321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:56.093751 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:44:56.093744088 +0000 UTC m=+413.239076941 I0824 19:44:56.137338 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:44:56.137326252 +0000 UTC m=+413.282659105 I0824 19:44:56.512665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:56.513367 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:44:56.51335735 +0000 UTC m=+413.658690223 I0824 19:44:56.574927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:56.618238 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:44:56.618214501 +0000 UTC m=+413.763547354 I0824 19:44:56.660325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:56.909339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:56.909682 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:44:56.909673313 +0000 UTC m=+414.055006166 I0824 19:44:57.012228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:44:57.262525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:45:04.458268 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" condition "Ready" to 2026-08-24 19:45:04.458236445 +0000 UTC m=+421.603569308 I0824 19:45:04.458729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:45:04.458748 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" condition "Issuing" to 2026-08-24 19:45:04.458743198 +0000 UTC m=+421.604076051 I0824 19:45:04.474007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:45:04.474061 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" condition "Ready" to 2026-08-24 19:45:04.474053794 +0000 UTC m=+421.619386627 I0824 19:45:04.888829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:45:04.918089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c5tw5-s48dc" condition "Approved" to 2026-08-24 19:45:04.918076722 +0000 UTC m=+422.063409585 I0824 19:45:04.940709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c5tw5-s48dc" condition "Ready" to 2026-08-24 19:45:04.940698856 +0000 UTC m=+422.086031709 I0824 19:45:04.973403 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:45:04.973389922 +0000 UTC m=+422.118722775 I0824 19:45:05.002131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:45:05.003243 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:45:05.003236662 +0000 UTC m=+422.148569605 I0824 19:45:05.020939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:45:05.021279 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c5tw5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:45:05.021272741 +0000 UTC m=+422.166605584 I0824 19:45:18.204014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:45:18.204045 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-24 19:45:18.204037545 +0000 UTC m=+435.349370398 I0824 19:45:18.204374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-24 19:45:18.204370154 +0000 UTC m=+435.349702997 I0824 19:45:18.218571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:45:18.218915 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-24 19:45:18.218907993 +0000 UTC m=+435.364240836 I0824 19:45:18.449966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:45:18.485323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nxh67" condition "Approved" to 2026-08-24 19:45:18.485315183 +0000 UTC m=+435.630648026 I0824 19:45:18.509013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nxh67" condition "Ready" to 2026-08-24 19:45:18.509002766 +0000 UTC m=+435.654335619 I0824 19:45:18.541482 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:45:18.541469444 +0000 UTC m=+435.686802287 I0824 19:45:18.572715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:48:43.211174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:48:43.211258 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-24 19:48:43.211246277 +0000 UTC m=+640.356579160 I0824 19:48:43.211758 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-24 19:48:43.211736588 +0000 UTC m=+640.357069461 I0824 19:48:43.234521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:48:43.234621 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-24 19:48:43.234612896 +0000 UTC m=+640.379945749 I0824 19:48:43.437144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:48:43.471078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-njzxc" condition "Approved" to 2026-08-24 19:48:43.471063172 +0000 UTC m=+640.616396025 I0824 19:48:43.491656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-njzxc" condition "Ready" to 2026-08-24 19:48:43.491643475 +0000 UTC m=+640.636976348 I0824 19:48:43.518212 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:48:43.51819708 +0000 UTC m=+640.663529933 I0824 19:48:43.540632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:48:43.540919 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:48:43.540912023 +0000 UTC m=+640.686244876 I0824 19:48:43.565937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:48:43.566228 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:48:43.566219199 +0000 UTC m=+640.711552062 I0824 19:49:24.442347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 19:49:24.442507 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-24 19:49:24.44244836 +0000 UTC m=+681.587781213 I0824 19:49:24.442929 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-24 19:49:24.442921791 +0000 UTC m=+681.588254654 I0824 19:49:24.466607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:49:24.466694 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-24 19:49:24.466685646 +0000 UTC m=+681.612018509 I0824 19:49:24.623979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:49:24.661416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k55kh" condition "Approved" to 2026-08-24 19:49:24.661406986 +0000 UTC m=+681.806739829 I0824 19:49:24.702597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-k55kh" condition "Ready" to 2026-08-24 19:49:24.702588653 +0000 UTC m=+681.847921496 I0824 19:49:24.725860 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:49:24.725849445 +0000 UTC m=+681.871182278 I0824 19:49:24.752032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:49:24.752601 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 19:49:24.752591959 +0000 UTC m=+681.897924842 I0824 19:49:24.774394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 19:49:24.776447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"