I0918 01:26:59.344518 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0918 01:26:59.345555 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 01:26:59.345736 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 01:26:59.354331 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 01:26:59.354993 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0918 01:26:59.355133 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 01:26:59.355149 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 01:26:59.359899 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 01:26:59.376169 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 01:26:59.379804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 01:26:59.382502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 01:26:59.385077 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 01:26:59.390905 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 01:26:59.393260 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 01:26:59.393448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 01:26:59.395930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 01:26:59.398524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 01:26:59.401086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 01:26:59.403534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 01:26:59.410649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 01:26:59.415521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 01:26:59.419518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 01:26:59.423952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 01:26:59.428053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 01:26:59.432324 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 01:26:59.432357 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 01:26:59.432466 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 01:26:59.436879 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 01:26:59.436914 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 01:26:59.436929 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 01:26:59.437003 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0918 01:26:59.441854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 01:26:59.452106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 01:26:59.455696 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.456870 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.457979 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.458176 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.493435 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.525158 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.531406 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.546348 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.569141 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:26:59.578465 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0918 01:27:11.009281 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 01:27:11.009263089 +0000 UTC m=+11.704484705 I0918 01:27:11.782412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:27:11.782648 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 01:27:11.782633097 +0000 UTC m=+12.477854713 I0918 01:27:11.783190 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 01:27:11.783112147 +0000 UTC m=+12.478333813 E0918 01:27:11.804282 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:27:11.804422 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 01:27:11.804408817 +0000 UTC m=+12.499630433 E0918 01:27:11.804470 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:27:11.806298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:27:11.806521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:27:11.806622 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 01:27:11.806608515 +0000 UTC m=+12.501830141 E0918 01:27:11.823587 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0918 01:27:11.823838 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:27:11.823949 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:27:11.824051 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0918 01:27:11.862920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:27:11.868985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zzxbx" condition "Approved" to 2026-09-18 01:27:11.86896679 +0000 UTC m=+12.564188406 I0918 01:27:11.889055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zzxbx" condition "Ready" to 2026-09-18 01:27:11.889038372 +0000 UTC m=+12.584259988 I0918 01:27:11.932874 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:27:11.932855768 +0000 UTC m=+12.628077364 I0918 01:27:11.955509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:27:16.824740 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:27:16.824712358 +0000 UTC m=+17.519933974 I0918 01:27:40.968366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:27:40.969499 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 01:27:40.969490675 +0000 UTC m=+41.664712271 I0918 01:27:40.968371 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 01:27:40.968342652 +0000 UTC m=+41.663564258 I0918 01:27:40.984766 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 01:27:40.984745912 +0000 UTC m=+41.679967508 I0918 01:27:41.001830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:27:41.011904 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 01:27:41.011889922 +0000 UTC m=+41.707111508 I0918 01:27:41.095832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:27:41.135680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-thg76" condition "Approved" to 2026-09-18 01:27:41.13566738 +0000 UTC m=+41.830888996 I0918 01:27:41.165703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-thg76" condition "Ready" to 2026-09-18 01:27:41.165692284 +0000 UTC m=+41.860913870 I0918 01:27:41.194401 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:27:41.194381432 +0000 UTC m=+41.889603028 I0918 01:27:41.219275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:27:41.289034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:58.137118 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Ready" to 2026-09-18 01:32:58.137053235 +0000 UTC m=+358.832274851 I0918 01:32:58.137160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-79.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:58.137263 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Issuing" to 2026-09-18 01:32:58.137247989 +0000 UTC m=+358.832469605 I0918 01:32:58.158713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-79.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-79.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:58.158804 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-79.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:58.158834 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Issuing" to 2026-09-18 01:32:58.158822635 +0000 UTC m=+358.854044251 I0918 01:32:58.546079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-79.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-79.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:58.552159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-79.nip.io-tls-ggmjd" condition "Approved" to 2026-09-18 01:32:58.552149752 +0000 UTC m=+359.247371338 I0918 01:32:58.587743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-79.nip.io-tls-ggmjd" condition "Ready" to 2026-09-18 01:32:58.587721831 +0000 UTC m=+359.282943457 I0918 01:32:58.632137 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:58.63211181 +0000 UTC m=+359.327333426 I0918 01:32:58.656945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-79.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-79.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:58.657247 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:58.657239229 +0000 UTC m=+359.352460815 I0918 01:32:58.676293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-79.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-79.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:58.677071 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-79.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:58.677056463 +0000 UTC m=+359.372278079 I0918 01:34:13.578781 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 01:34:13.578766478 +0000 UTC m=+434.273988054 I0918 01:34:13.579384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:34:13.579466 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 01:34:13.579454962 +0000 UTC m=+434.274676548 I0918 01:34:13.603884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:34:13.603988 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 01:34:13.603975407 +0000 UTC m=+434.299197023 E0918 01:34:13.612652 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:34:13.612695 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 01:34:13.612684414 +0000 UTC m=+434.307906000 E0918 01:34:13.612762 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:34:13.636542 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0918 01:34:13.636637 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:34:13.636662 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:34:13.636698 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0918 01:34:13.642842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:34:13.673511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jj85d" condition "Approved" to 2026-09-18 01:34:13.673488366 +0000 UTC m=+434.368709962 I0918 01:34:13.690093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jj85d" condition "Ready" to 2026-09-18 01:34:13.690077171 +0000 UTC m=+434.385298787 I0918 01:34:13.721065 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:34:13.721050494 +0000 UTC m=+434.416272110 I0918 01:34:13.746092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:34:18.637250 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:34:18.637230246 +0000 UTC m=+439.332451872 I0918 01:35:03.449276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:35:03.449370 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 01:35:03.449342453 +0000 UTC m=+484.144564039 I0918 01:35:03.453532 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 01:35:03.453515819 +0000 UTC m=+484.148737395 I0918 01:35:03.454460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:35:03.454687 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 01:35:03.454676792 +0000 UTC m=+484.149898388 I0918 01:35:03.455169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:35:03.455185 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 01:35:03.455182502 +0000 UTC m=+484.150404088 I0918 01:35:03.455409 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 01:35:03.455405157 +0000 UTC m=+484.150626733 I0918 01:35:03.471485 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 01:35:03.445354942 +0000 UTC m=+484.140576538 I0918 01:35:03.506910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:03.506963 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 01:35:03.50695548 +0000 UTC m=+484.202177066 I0918 01:35:03.508771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:03.508964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:35:03.509035 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 01:35:03.508988662 +0000 UTC m=+484.204210248 I0918 01:35:03.509845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:03.511441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:35:03.511472 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 01:35:03.511460791 +0000 UTC m=+484.206682367 I0918 01:35:03.746150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:03.780490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6npn7" condition "Approved" to 2026-09-18 01:35:03.780468334 +0000 UTC m=+484.475689910 I0918 01:35:03.817476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6npn7" condition "Ready" to 2026-09-18 01:35:03.81746714 +0000 UTC m=+484.512688726 I0918 01:35:03.886470 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:35:03.886449648 +0000 UTC m=+484.581671234 I0918 01:35:03.887522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-88h6h" condition "Approved" to 2026-09-18 01:35:03.887507 +0000 UTC m=+484.582728586 I0918 01:35:03.923878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:03.925069 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:35:03.925058906 +0000 UTC m=+484.620280492 I0918 01:35:03.925180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-88h6h" condition "Ready" to 2026-09-18 01:35:03.925170709 +0000 UTC m=+484.620392295 I0918 01:35:03.954602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:03.971574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:03.979741 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:35:03.979731833 +0000 UTC m=+484.674953419 I0918 01:35:04.005399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:04.291494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:04.380670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:04.502030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-958kg" condition "Approved" to 2026-09-18 01:35:04.502007338 +0000 UTC m=+485.197228934 I0918 01:35:04.543379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-958kg" condition "Ready" to 2026-09-18 01:35:04.543340761 +0000 UTC m=+485.238562357 I0918 01:35:05.036491 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:35:05.036470661 +0000 UTC m=+485.731692277 I0918 01:35:05.134061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:05.134561 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:35:05.134547301 +0000 UTC m=+485.829768917 I0918 01:35:05.386501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:05.440318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:12.396092 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zgljw-tls" condition "Ready" to 2026-09-18 01:35:12.396065254 +0000 UTC m=+493.091286850 I0918 01:35:12.396505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgljw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:35:12.396626 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zgljw-tls" condition "Issuing" to 2026-09-18 01:35:12.396606095 +0000 UTC m=+493.091827711 I0918 01:35:12.412094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgljw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zgljw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:12.412192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgljw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:35:12.412228 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zgljw-tls" condition "Issuing" to 2026-09-18 01:35:12.412203742 +0000 UTC m=+493.107425338 I0918 01:35:12.775572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zgljw-6wwv9" condition "Approved" to 2026-09-18 01:35:12.774821334 +0000 UTC m=+493.470042930 I0918 01:35:12.802186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zgljw-6wwv9" condition "Ready" to 2026-09-18 01:35:12.802171898 +0000 UTC m=+493.497393484 I0918 01:35:12.841203 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zgljw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:35:12.841168959 +0000 UTC m=+493.536390565 I0918 01:35:12.861753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zgljw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zgljw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:25.861147 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 01:35:25.861124741 +0000 UTC m=+506.556346327 I0918 01:35:25.861166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:35:25.862139 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 01:35:25.86211131 +0000 UTC m=+506.557332916 I0918 01:35:25.877770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:25.877862 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 01:35:25.877852007 +0000 UTC m=+506.573073583 I0918 01:35:26.061170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:35:26.095335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rmqs5" condition "Approved" to 2026-09-18 01:35:26.095311284 +0000 UTC m=+506.790532860 I0918 01:35:26.119865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rmqs5" condition "Ready" to 2026-09-18 01:35:26.119856266 +0000 UTC m=+506.815077852 I0918 01:35:26.149031 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:35:26.149022491 +0000 UTC m=+506.844244077 I0918 01:35:26.177975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:45.785537 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 01:38:45.785502389 +0000 UTC m=+706.480724015 I0918 01:38:45.785965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:38:45.786064 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 01:38:45.786042989 +0000 UTC m=+706.481264605 I0918 01:38:45.808241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:45.808593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:38:45.809124 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 01:38:45.80910951 +0000 UTC m=+706.504331136 I0918 01:38:45.963443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tz987" condition "Approved" to 2026-09-18 01:38:45.96342397 +0000 UTC m=+706.658645556 I0918 01:38:45.983661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tz987" condition "Ready" to 2026-09-18 01:38:45.983647524 +0000 UTC m=+706.678869110 I0918 01:38:46.018162 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:38:46.018135458 +0000 UTC m=+706.713357064 I0918 01:38:46.067900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:46.068332 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:38:46.068323255 +0000 UTC m=+706.763544841 I0918 01:38:46.078018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:46.089162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:46.089449 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:38:46.089438861 +0000 UTC m=+706.784660447 I0918 01:38:46.091215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:31.923310 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 01:39:31.923287316 +0000 UTC m=+752.618508932 I0918 01:39:31.923781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:39:31.923809 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 01:39:31.923802773 +0000 UTC m=+752.619024389 I0918 01:39:31.946010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:31.946088 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 01:39:31.946078353 +0000 UTC m=+752.641299939 I0918 01:39:32.407583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:32.454384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-b72j8" condition "Approved" to 2026-09-18 01:39:32.45434327 +0000 UTC m=+753.149564896 I0918 01:39:32.479431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-b72j8" condition "Ready" to 2026-09-18 01:39:32.479414985 +0000 UTC m=+753.174636601 I0918 01:39:32.514704 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:32.514683682 +0000 UTC m=+753.209905278 I0918 01:39:32.545254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:32.612226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"