I0918 02:21:21.555665 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0918 02:21:21.555823 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 02:21:21.555922 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 02:21:21.561312 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 02:21:21.561976 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0918 02:21:21.561999 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 02:21:21.562053 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 02:21:21.565717 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 02:21:21.580491 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 02:21:21.580688 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 02:21:21.583933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 02:21:21.589166 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 02:21:21.589335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 02:21:21.595046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 02:21:21.598937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 02:21:21.603649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 02:21:21.607729 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 02:21:21.607812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 02:21:21.611588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 02:21:21.615413 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 02:21:21.617998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0918 02:21:21.622966 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 02:21:21.623033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 02:21:21.627110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 02:21:21.630595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 02:21:21.634418 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 02:21:21.634504 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 02:21:21.634508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 02:21:21.638523 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 02:21:21.642137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 02:21:21.646005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 02:21:21.649017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 02:21:21.651983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 02:21:21.656333 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.656665 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.658701 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.676630 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.697161 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.719426 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.747529 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.751740 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.764308 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:21.779830 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 02:21:34.253933 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 02:21:34.253918592 +0000 UTC m=+12.739019510 I0918 02:21:35.020178 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 02:21:35.020164595 +0000 UTC m=+13.505265483 I0918 02:21:35.020549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:21:35.020720 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 02:21:35.020686805 +0000 UTC m=+13.505787713 E0918 02:21:35.038795 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:21:35.038966 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 02:21:35.038955316 +0000 UTC m=+13.524056234 E0918 02:21:35.039036 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:21:35.044324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:21:35.044444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:21:35.044477 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 02:21:35.044465798 +0000 UTC m=+13.529566716 E0918 02:21:35.059652 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0918 02:21:35.059836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:21:35.059939 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:21:35.060018 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 02:21:35.092620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-847fc" condition "Approved" to 2026-09-18 02:21:35.092609076 +0000 UTC m=+13.577709964 I0918 02:21:35.108240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-847fc" condition "Ready" to 2026-09-18 02:21:35.108231234 +0000 UTC m=+13.593332122 I0918 02:21:35.135388 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:21:35.135361964 +0000 UTC m=+13.620462872 I0918 02:21:35.152838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:21:40.060992 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:21:40.060973892 +0000 UTC m=+18.546074800 I0918 02:22:03.585345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:22:03.585406 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 02:22:03.585391627 +0000 UTC m=+42.070492515 I0918 02:22:03.585631 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 02:22:03.585623861 +0000 UTC m=+42.070724759 I0918 02:22:03.599962 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 02:22:03.599886368 +0000 UTC m=+42.084987246 I0918 02:22:03.629505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:22:03.629604 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 02:22:03.629597031 +0000 UTC m=+42.114697909 I0918 02:22:03.991502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:22:04.047773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mn5fk" condition "Approved" to 2026-09-18 02:22:04.047759936 +0000 UTC m=+42.532860854 I0918 02:22:04.078211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mn5fk" condition "Ready" to 2026-09-18 02:22:04.078198029 +0000 UTC m=+42.563298937 I0918 02:22:04.105224 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:22:04.105212094 +0000 UTC m=+42.590312972 I0918 02:22:04.141853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:27:22.831852 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-203.nip.io-tls" condition "Ready" to 2026-09-18 02:27:22.831792964 +0000 UTC m=+361.316893862 I0918 02:27:22.832421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-203.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:27:22.832545 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-203.nip.io-tls" condition "Issuing" to 2026-09-18 02:27:22.832533672 +0000 UTC m=+361.317634580 I0918 02:27:22.854428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-203.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-203.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:27:22.854540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-203.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:27:22.854571 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-203.nip.io-tls" condition "Issuing" to 2026-09-18 02:27:22.854556829 +0000 UTC m=+361.339657747 I0918 02:27:23.187984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-203.nip.io-tls-lwbkr" condition "Approved" to 2026-09-18 02:27:23.187942419 +0000 UTC m=+361.673043367 I0918 02:27:23.227929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-203.nip.io-tls-lwbkr" condition "Ready" to 2026-09-18 02:27:23.227912316 +0000 UTC m=+361.713013194 I0918 02:27:23.269124 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-203.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:27:23.269093824 +0000 UTC m=+361.754194702 I0918 02:27:23.296452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-203.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-203.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:28:36.435969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:28:36.436029 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 02:28:36.436023569 +0000 UTC m=+434.921124447 I0918 02:28:36.436017 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 02:28:36.435960178 +0000 UTC m=+434.921061096 I0918 02:28:36.458216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:28:36.458311 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 02:28:36.458302419 +0000 UTC m=+434.943403327 E0918 02:28:36.459267 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 02:28:36.459342 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 02:28:36.459335092 +0000 UTC m=+434.944436000 E0918 02:28:36.459372 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:28:36.478756 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0918 02:28:36.479141 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:28:36.479372 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 02:28:36.479542 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0918 02:28:36.489350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:28:36.518241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9p8qp" condition "Approved" to 2026-09-18 02:28:36.518218282 +0000 UTC m=+435.003319190 I0918 02:28:36.532927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9p8qp" condition "Ready" to 2026-09-18 02:28:36.532908238 +0000 UTC m=+435.018009146 I0918 02:28:36.564000 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:28:36.563983679 +0000 UTC m=+435.049084587 I0918 02:28:36.584408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:28:36.585019 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:28:36.585010812 +0000 UTC m=+435.070111680 I0918 02:28:36.593985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:28:36.604593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:28:41.479531 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:28:41.479513703 +0000 UTC m=+439.964614611 I0918 02:29:25.553213 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 02:29:25.553185651 +0000 UTC m=+484.038286519 I0918 02:29:25.553920 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:29:25.553971 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 02:29:25.553967237 +0000 UTC m=+484.039068115 I0918 02:29:25.564984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:29:25.565029 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 02:29:25.565021819 +0000 UTC m=+484.050122697 I0918 02:29:25.565434 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 02:29:25.565418777 +0000 UTC m=+484.050519655 I0918 02:29:25.582045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:29:25.582111 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 02:29:25.582103922 +0000 UTC m=+484.067204800 I0918 02:29:25.582654 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 02:29:25.582638182 +0000 UTC m=+484.067739060 I0918 02:29:25.620448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:25.620604 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 02:29:25.620594994 +0000 UTC m=+484.105695872 I0918 02:29:25.622320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:25.622413 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 02:29:25.62240578 +0000 UTC m=+484.107506658 I0918 02:29:25.641351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:25.641405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:29:25.641420 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 02:29:25.641414152 +0000 UTC m=+484.126515030 I0918 02:29:25.677445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:25.688738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:25.704628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g99zw" condition "Approved" to 2026-09-18 02:29:25.70461655 +0000 UTC m=+484.189717428 I0918 02:29:25.720328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ch2b9" condition "Approved" to 2026-09-18 02:29:25.720319165 +0000 UTC m=+484.205420043 I0918 02:29:25.721432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g99zw" condition "Ready" to 2026-09-18 02:29:25.721421017 +0000 UTC m=+484.206521885 I0918 02:29:25.735155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ch2b9" condition "Ready" to 2026-09-18 02:29:25.735143692 +0000 UTC m=+484.220244570 I0918 02:29:25.744906 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:25.744896288 +0000 UTC m=+484.229997166 I0918 02:29:25.760891 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:25.760875359 +0000 UTC m=+484.245976237 I0918 02:29:25.765715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:25.766240 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:25.766227656 +0000 UTC m=+484.251328534 I0918 02:29:25.846616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:25.847212 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:25.847203181 +0000 UTC m=+484.332304069 I0918 02:29:25.949245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:25.949623 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:25.949614776 +0000 UTC m=+484.434715654 I0918 02:29:26.348519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:26.422301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxg2p" condition "Approved" to 2026-09-18 02:29:26.42228086 +0000 UTC m=+484.907381738 I0918 02:29:26.508022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxg2p" condition "Ready" to 2026-09-18 02:29:26.508007918 +0000 UTC m=+484.993108796 I0918 02:29:27.031197 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:27.031176452 +0000 UTC m=+485.516277340 I0918 02:29:27.277758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:27.278712 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:27.278698285 +0000 UTC m=+485.763799193 I0918 02:29:27.327000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0918 02:29:27.342374 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-tmh2h\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0918 02:29:35.097415 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" condition "Ready" to 2026-09-18 02:29:35.097392747 +0000 UTC m=+493.582493625 I0918 02:29:35.097641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:29:35.098373 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" condition "Issuing" to 2026-09-18 02:29:35.098338255 +0000 UTC m=+493.583439143 I0918 02:29:35.163100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:35.163192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:29:35.163215 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" condition "Issuing" to 2026-09-18 02:29:35.163209271 +0000 UTC m=+493.648310149 I0918 02:29:35.360676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:35.362781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pgkjk-64qqh" condition "Approved" to 2026-09-18 02:29:35.362759117 +0000 UTC m=+493.847859995 I0918 02:29:35.384050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pgkjk-64qqh" condition "Ready" to 2026-09-18 02:29:35.384027989 +0000 UTC m=+493.869128867 I0918 02:29:35.570130 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:35.570117178 +0000 UTC m=+494.055218056 I0918 02:29:35.663776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pgkjk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:51.844642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:29:51.844686 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 02:29:51.844667759 +0000 UTC m=+510.329768637 I0918 02:29:51.845173 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 02:29:51.845169099 +0000 UTC m=+510.330269967 I0918 02:29:51.868014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:51.868115 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 02:29:51.868106956 +0000 UTC m=+510.353207834 I0918 02:29:52.126131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:52.182965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c8wm9" condition "Approved" to 2026-09-18 02:29:52.182954124 +0000 UTC m=+510.668055002 I0918 02:29:52.202859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c8wm9" condition "Ready" to 2026-09-18 02:29:52.20284813 +0000 UTC m=+510.687949008 I0918 02:29:52.236426 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:29:52.236412773 +0000 UTC m=+510.721513651 I0918 02:29:52.258273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:29:52.336790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:10.545119 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 02:33:10.545076246 +0000 UTC m=+709.030177134 I0918 02:33:10.545747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:33:10.545826 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 02:33:10.545819829 +0000 UTC m=+709.030920717 I0918 02:33:10.570051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:10.570375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:33:10.570406 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 02:33:10.570399124 +0000 UTC m=+709.055500012 I0918 02:33:10.766131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-95szg" condition "Approved" to 2026-09-18 02:33:10.766113478 +0000 UTC m=+709.251214396 I0918 02:33:10.794791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-95szg" condition "Ready" to 2026-09-18 02:33:10.794756409 +0000 UTC m=+709.279857317 I0918 02:33:10.827330 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:33:10.827318731 +0000 UTC m=+709.312419609 I0918 02:33:10.854051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:10.854477 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:33:10.854469528 +0000 UTC m=+709.339570436 I0918 02:33:10.870617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:10.871047 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:33:10.871037136 +0000 UTC m=+709.356138044 I0918 02:33:50.695490 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 02:33:50.695474124 +0000 UTC m=+749.180575032 I0918 02:33:50.695659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:33:50.697905 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 02:33:50.697893681 +0000 UTC m=+749.182994589 I0918 02:33:50.723488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 02:33:50.723646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 02:33:50.723729 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 02:33:50.723681192 +0000 UTC m=+749.208782110 I0918 02:33:50.957049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vgx7r" condition "Approved" to 2026-09-18 02:33:50.957026314 +0000 UTC m=+749.442127232 I0918 02:33:50.983392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-vgx7r" condition "Ready" to 2026-09-18 02:33:50.983379468 +0000 UTC m=+749.468480346 I0918 02:33:51.013915 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 02:33:51.013892457 +0000 UTC m=+749.498993335 I0918 02:33:51.038606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"