I0923 10:30:48.981398 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0923 10:30:48.981524 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0923 10:30:48.981611 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0923 10:30:48.987296 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0923 10:30:48.987815 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0923 10:30:48.987887 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0923 10:30:48.987916 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0923 10:30:48.992957 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0923 10:30:49.005001 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0923 10:30:49.009569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0923 10:30:49.013049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0923 10:30:49.016062 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0923 10:30:49.017862 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0923 10:30:49.017891 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0923 10:30:49.017932 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0923 10:30:49.021962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0923 10:30:49.024043 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0923 10:30:49.025683 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0923 10:30:49.025805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0923 10:30:49.027577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0923 10:30:49.029451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0923 10:30:49.031340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0923 10:30:49.033244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0923 10:30:49.037111 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0923 10:30:49.037160 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0923 10:30:49.037171 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0923 10:30:49.037322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0923 10:30:49.040572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0923 10:30:49.042786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0923 10:30:49.044838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0923 10:30:49.046995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0923 10:30:49.049233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0923 10:30:49.052205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0923 10:30:49.054827 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.055134 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.055353 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.056314 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.071734 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.083681 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.105305 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.114431 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.124388 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:49.138075 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0923 10:30:59.281997 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-23 10:30:59.281983885 +0000 UTC m=+10.333134918 I0923 10:31:00.074175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:31:00.074245 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-23 10:31:00.074236353 +0000 UTC m=+11.125387396 I0923 10:31:00.074414 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-23 10:31:00.074383667 +0000 UTC m=+11.125534710 I0923 10:31:00.085570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:31:00.085654 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:31:00.085673 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-23 10:31:00.085666736 +0000 UTC m=+11.136817769 E0923 10:31:00.087599 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0923 10:31:00.087668 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-23 10:31:00.087661702 +0000 UTC m=+11.138812755 E0923 10:31:00.087693 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:31:00.103190 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0923 10:31:00.103372 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:31:00.103422 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:31:00.103455 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0923 10:31:00.121302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:31:00.125203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-98nhb" condition "Approved" to 2026-09-23 10:31:00.125194354 +0000 UTC m=+11.176345387 I0923 10:31:00.135911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-98nhb" condition "Ready" to 2026-09-23 10:31:00.135902527 +0000 UTC m=+11.187053560 I0923 10:31:00.159201 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:31:00.159159844 +0000 UTC m=+11.210310877 I0923 10:31:00.175121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:31:00.175369 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:31:00.175362912 +0000 UTC m=+11.226513935 I0923 10:31:00.195952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:31:05.104260 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:31:05.104244399 +0000 UTC m=+16.155395462 I0923 10:31:27.968595 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-23 10:31:27.968582983 +0000 UTC m=+39.019734016 I0923 10:31:27.968909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:31:27.968989 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-23 10:31:27.968981525 +0000 UTC m=+39.020132578 I0923 10:31:27.989027 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-23 10:31:27.989015908 +0000 UTC m=+39.040166941 I0923 10:31:27.998490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:31:27.998581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:31:27.998609 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-23 10:31:27.998601281 +0000 UTC m=+39.049752334 I0923 10:31:28.164980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xvxv5" condition "Approved" to 2026-09-23 10:31:28.164969206 +0000 UTC m=+39.216120249 I0923 10:31:28.188714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xvxv5" condition "Ready" to 2026-09-23 10:31:28.188703538 +0000 UTC m=+39.239854571 I0923 10:31:28.218745 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:31:28.218732729 +0000 UTC m=+39.269883762 I0923 10:31:28.245715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:31:28.298384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:35:55.535897 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-143.nip.io-tls" condition "Ready" to 2026-09-23 10:35:55.535869057 +0000 UTC m=+306.587020090 I0923 10:35:55.536361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-143.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:35:55.536422 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-143.nip.io-tls" condition "Issuing" to 2026-09-23 10:35:55.536388036 +0000 UTC m=+306.587539099 I0923 10:35:55.555721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-143.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-143.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:35:55.555777 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-143.nip.io-tls" condition "Ready" to 2026-09-23 10:35:55.555770823 +0000 UTC m=+306.606921856 I0923 10:35:55.795443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-143.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-143.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:35:55.830164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-143.nip.io-tls-d8wvm" condition "Approved" to 2026-09-23 10:35:55.830153705 +0000 UTC m=+306.881304738 I0923 10:35:55.866650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-143.nip.io-tls-d8wvm" condition "Ready" to 2026-09-23 10:35:55.866635952 +0000 UTC m=+306.917787025 I0923 10:35:55.896814 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-143.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:35:55.896802592 +0000 UTC m=+306.947953655 I0923 10:35:55.920730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-143.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-143.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:35:55.921118 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-143.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:35:55.921113454 +0000 UTC m=+306.972264487 I0923 10:35:55.948663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-143.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-143.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:36:59.872166 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-23 10:36:59.872151508 +0000 UTC m=+370.923302541 I0923 10:36:59.872438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:36:59.872474 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-23 10:36:59.872470065 +0000 UTC m=+370.923621098 E0923 10:36:59.886284 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0923 10:36:59.887929 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-23 10:36:59.887910049 +0000 UTC m=+370.939061082 E0923 10:36:59.888035 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0923 10:36:59.928598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:36:59.928669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-23 10:36:59.928662463 +0000 UTC m=+370.979813496 E0923 10:36:59.952583 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0923 10:36:59.952662 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:36:59.952685 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:36:59.952718 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0923 10:36:59.982528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:00.026538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q729j" condition "Approved" to 2026-09-23 10:37:00.026520526 +0000 UTC m=+371.077671559 I0923 10:37:00.048586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q729j" condition "Ready" to 2026-09-23 10:37:00.048576152 +0000 UTC m=+371.099727185 I0923 10:37:00.067424 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:00.067412615 +0000 UTC m=+371.118563648 I0923 10:37:00.081417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:00.081586 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:00.081580341 +0000 UTC m=+371.132731374 I0923 10:37:00.101435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:00.101435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:04.953341 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:04.953329331 +0000 UTC m=+376.004480374 I0923 10:37:46.992049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:46.992107 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-23 10:37:46.992099773 +0000 UTC m=+418.043250826 I0923 10:37:46.992481 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-23 10:37:46.992476483 +0000 UTC m=+418.043627516 I0923 10:37:46.998884 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-23 10:37:46.998868487 +0000 UTC m=+418.050019510 I0923 10:37:46.999864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:46.999887 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-23 10:37:46.999884083 +0000 UTC m=+418.051035126 I0923 10:37:47.001616 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-23 10:37:47.001611468 +0000 UTC m=+418.052762511 I0923 10:37:47.001829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:47.001892 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-23 10:37:47.001881864 +0000 UTC m=+418.053032917 I0923 10:37:47.032329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:47.032385 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-23 10:37:47.032378322 +0000 UTC m=+418.083529345 I0923 10:37:47.051937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:47.052019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:47.052048 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-23 10:37:47.05204232 +0000 UTC m=+418.103193353 I0923 10:37:47.056472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:47.056539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:47.056564 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-23 10:37:47.056558415 +0000 UTC m=+418.107709448 I0923 10:37:47.206089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m5jn6" condition "Approved" to 2026-09-23 10:37:47.206074551 +0000 UTC m=+418.257225584 I0923 10:37:47.221582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m5jn6" condition "Ready" to 2026-09-23 10:37:47.221573622 +0000 UTC m=+418.272724645 I0923 10:37:47.245169 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:47.24515613 +0000 UTC m=+418.296307163 I0923 10:37:47.279909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:47.281735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:47.282085 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:47.282076952 +0000 UTC m=+418.333227985 I0923 10:37:47.289825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6kpgc" condition "Approved" to 2026-09-23 10:37:47.289810362 +0000 UTC m=+418.340961395 I0923 10:37:47.313061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:47.313130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:47.316313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6kpgc" condition "Ready" to 2026-09-23 10:37:47.316302565 +0000 UTC m=+418.367453598 I0923 10:37:47.498137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jmv5f" condition "Approved" to 2026-09-23 10:37:47.498122264 +0000 UTC m=+418.549273327 I0923 10:37:47.508872 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:47.508858171 +0000 UTC m=+418.560009244 I0923 10:37:47.859856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jmv5f" condition "Ready" to 2026-09-23 10:37:47.859789943 +0000 UTC m=+418.910940976 I0923 10:37:47.955715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:48.206632 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:48.206611369 +0000 UTC m=+419.257762402 I0923 10:37:48.352890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0923 10:37:48.647615 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-7chtm\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0923 10:37:54.124843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:54.124881 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" condition "Issuing" to 2026-09-23 10:37:54.124873864 +0000 UTC m=+425.176024907 I0923 10:37:54.124878 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" condition "Ready" to 2026-09-23 10:37:54.124864443 +0000 UTC m=+425.176015476 I0923 10:37:54.140237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dggqs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:54.141901 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" condition "Ready" to 2026-09-23 10:37:54.141880948 +0000 UTC m=+425.193031971 I0923 10:37:54.215003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dggqs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:54.381518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dggqs-knv4c" condition "Approved" to 2026-09-23 10:37:54.381504379 +0000 UTC m=+425.432655412 I0923 10:37:54.404333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dggqs-knv4c" condition "Ready" to 2026-09-23 10:37:54.404319286 +0000 UTC m=+425.455470309 I0923 10:37:54.663583 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" resource_name="kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="kube-prometheus-stack-prometheus-node-exporter-dggqs-knv4c" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="kube-prometheus-stack-prometheus-node-exporter-dggqs-tls-dt46j" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0923 10:37:54.705430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dggqs-6tct5" condition "Approved" to 2026-09-23 10:37:54.705414494 +0000 UTC m=+425.756565527 I0923 10:37:54.722150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dggqs-6tct5" condition "Ready" to 2026-09-23 10:37:54.722140151 +0000 UTC m=+425.773291184 I0923 10:37:54.757917 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:54.757903695 +0000 UTC m=+425.809054728 I0923 10:37:54.845624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dggqs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:54.845924 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:54.845915986 +0000 UTC m=+425.897067019 I0923 10:37:54.880895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dggqs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:54.881133 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dggqs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:54.881127825 +0000 UTC m=+425.932278858 I0923 10:38:08.912262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-23 10:38:08.912247466 +0000 UTC m=+439.963398509 I0923 10:38:08.913079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:38:08.913100 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-23 10:38:08.913095089 +0000 UTC m=+439.964246122 I0923 10:38:08.931188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:38:08.931341 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-23 10:38:08.931333036 +0000 UTC m=+439.982484069 I0923 10:38:09.351242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:38:09.427253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8cnfh" condition "Approved" to 2026-09-23 10:38:09.42723893 +0000 UTC m=+440.478389963 I0923 10:38:09.446254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8cnfh" condition "Ready" to 2026-09-23 10:38:09.446229499 +0000 UTC m=+440.497380532 I0923 10:38:09.484965 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:38:09.484950616 +0000 UTC m=+440.536101649 I0923 10:38:09.511110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:38:09.511733 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:38:09.511560669 +0000 UTC m=+440.562711702 I0923 10:38:09.533061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:41:28.226495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:41:28.226507 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-23 10:41:28.226485141 +0000 UTC m=+639.277636204 I0923 10:41:28.226567 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-23 10:41:28.226557494 +0000 UTC m=+639.277708567 I0923 10:41:28.249179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:41:28.249262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:41:28.249288 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-23 10:41:28.249279268 +0000 UTC m=+639.300430331 I0923 10:41:28.531953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q9frd" condition "Approved" to 2026-09-23 10:41:28.531942497 +0000 UTC m=+639.583093530 I0923 10:41:28.605019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-q9frd" condition "Ready" to 2026-09-23 10:41:28.605009352 +0000 UTC m=+639.656160385 I0923 10:41:28.673186 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:41:28.673174654 +0000 UTC m=+639.724325687 I0923 10:41:28.700791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:41:28.701048 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:41:28.701042687 +0000 UTC m=+639.752193730 I0923 10:41:28.746731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:42:12.600175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:42:12.600266 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-23 10:42:12.600198676 +0000 UTC m=+683.651349749 I0923 10:42:12.600925 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-23 10:42:12.600483457 +0000 UTC m=+683.651634560 I0923 10:42:12.637524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:42:12.637649 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-23 10:42:12.637637814 +0000 UTC m=+683.688788877 I0923 10:42:12.831381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:42:12.893249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nh4pl" condition "Approved" to 2026-09-23 10:42:12.893237266 +0000 UTC m=+683.944388299 I0923 10:42:12.914301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-nh4pl" condition "Ready" to 2026-09-23 10:42:12.914291237 +0000 UTC m=+683.965442270 I0923 10:42:12.944523 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:42:12.944513813 +0000 UTC m=+683.995664846 I0923 10:42:12.975557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"