I0914 16:15:56.628884 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0914 16:15:56.629036 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0914 16:15:56.629119 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0914 16:15:56.633732 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0914 16:15:56.634196 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0914 16:15:56.634332 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0914 16:15:56.634489 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0914 16:15:56.638285 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0914 16:15:56.654086 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0914 16:15:56.662931 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0914 16:15:56.663037 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0914 16:15:56.663102 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0914 16:15:56.663176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0914 16:15:56.667559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0914 16:15:56.671267 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0914 16:15:56.674904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0914 16:15:56.678549 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0914 16:15:56.678582 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0914 16:15:56.681719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0914 16:15:56.685888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0914 16:15:56.692106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0914 16:15:56.696071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0914 16:15:56.699690 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0914 16:15:56.699741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0914 16:15:56.703873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0914 16:15:56.708610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0914 16:15:56.713022 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0914 16:15:56.717260 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0914 16:15:56.725229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0914 16:15:56.730496 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0914 16:15:56.734439 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0914 16:15:56.734518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0914 16:15:56.738772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0914 16:15:56.741613 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.742459 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.743137 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.774343 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.803832 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.821165 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.849064 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.863510 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.866779 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:15:56.881498 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0914 16:16:10.627833 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-14 16:16:10.62780925 +0000 UTC m=+14.035449769 I0914 16:16:11.408648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:16:11.408944 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-14 16:16:11.408930391 +0000 UTC m=+14.816570910 I0914 16:16:11.409446 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-14 16:16:11.409420621 +0000 UTC m=+14.817061130 E0914 16:16:11.428938 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0914 16:16:11.429036 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-14 16:16:11.429027094 +0000 UTC m=+14.836667593 E0914 16:16:11.429067 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0914 16:16:11.434915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:11.435422 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-14 16:16:11.43534031 +0000 UTC m=+14.842980899 E0914 16:16:11.443312 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0914 16:16:11.443571 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0914 16:16:11.443620 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0914 16:16:11.443700 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0914 16:16:11.457555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:11.488426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xcd52" condition "Approved" to 2026-09-14 16:16:11.488395142 +0000 UTC m=+14.896035631 I0914 16:16:11.504056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xcd52" condition "Ready" to 2026-09-14 16:16:11.504041581 +0000 UTC m=+14.911682110 I0914 16:16:11.528094 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:16:11.528035864 +0000 UTC m=+14.935676353 I0914 16:16:11.559760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:11.560340 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:16:11.560326162 +0000 UTC m=+14.967966691 I0914 16:16:11.579567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:11.579810 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:16:11.579803112 +0000 UTC m=+14.987443601 I0914 16:16:16.443783 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:16:16.443767189 +0000 UTC m=+19.851407718 I0914 16:16:40.052169 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-14 16:16:40.052116753 +0000 UTC m=+43.459757292 I0914 16:16:40.052487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:16:40.052573 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-14 16:16:40.05253899 +0000 UTC m=+43.460179519 I0914 16:16:40.066393 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-14 16:16:40.066376109 +0000 UTC m=+43.474016638 I0914 16:16:40.087176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:40.087810 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-14 16:16:40.087800567 +0000 UTC m=+43.495441106 I0914 16:16:40.285233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:40.320746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rrpsq" condition "Approved" to 2026-09-14 16:16:40.320735602 +0000 UTC m=+43.728376101 I0914 16:16:40.349996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rrpsq" condition "Ready" to 2026-09-14 16:16:40.349979685 +0000 UTC m=+43.757620214 I0914 16:16:40.387243 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:16:40.387232783 +0000 UTC m=+43.794873282 I0914 16:16:40.419775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:40.420197 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:16:40.420188035 +0000 UTC m=+43.827828554 I0914 16:16:40.430949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:40.446728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:16:40.446989 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:16:40.446977409 +0000 UTC m=+43.854617908 I0914 16:21:40.894248 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-181.nip.io-tls" condition "Ready" to 2026-09-14 16:21:40.894180323 +0000 UTC m=+344.301820852 I0914 16:21:40.894721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-181.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:21:40.894818 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-181.nip.io-tls" condition "Issuing" to 2026-09-14 16:21:40.894810236 +0000 UTC m=+344.302450765 I0914 16:21:40.920495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-181.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-181.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:21:40.920787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-181.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:21:40.920861 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-181.nip.io-tls" condition "Issuing" to 2026-09-14 16:21:40.920853797 +0000 UTC m=+344.328494286 I0914 16:21:41.211749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-181.nip.io-tls-h4wjs" condition "Approved" to 2026-09-14 16:21:41.211735028 +0000 UTC m=+344.619375537 I0914 16:21:41.252039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-181.nip.io-tls-h4wjs" condition "Ready" to 2026-09-14 16:21:41.252025488 +0000 UTC m=+344.659665987 I0914 16:21:41.297801 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-181.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:21:41.297789783 +0000 UTC m=+344.705430272 I0914 16:21:41.323172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-181.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-181.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:22:49.757229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:22:49.757347 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-14 16:22:49.757329324 +0000 UTC m=+413.164969853 I0914 16:22:49.757301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-14 16:22:49.757263913 +0000 UTC m=+413.164904442 E0914 16:22:49.771288 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0914 16:22:49.771402 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-14 16:22:49.771387802 +0000 UTC m=+413.179028331 E0914 16:22:49.771448 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0914 16:22:49.775019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:22:49.775117 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-14 16:22:49.775109451 +0000 UTC m=+413.182749940 E0914 16:22:49.785300 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0914 16:22:49.786423 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0914 16:22:49.786495 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0914 16:22:49.786787 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0914 16:22:49.800682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:22:49.829573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-psfd9" condition "Approved" to 2026-09-14 16:22:49.82955006 +0000 UTC m=+413.237190609 I0914 16:22:49.843629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-psfd9" condition "Ready" to 2026-09-14 16:22:49.843610188 +0000 UTC m=+413.251250707 I0914 16:22:49.871093 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:22:49.871032281 +0000 UTC m=+413.278672800 I0914 16:22:49.891484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:22:49.891750 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:22:49.891742911 +0000 UTC m=+413.299383410 I0914 16:22:49.907661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:22:49.907944 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:22:49.907935469 +0000 UTC m=+413.315575988 I0914 16:22:49.910629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:22:54.785772 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:22:54.785759697 +0000 UTC m=+418.193400226 I0914 16:23:36.809807 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-14 16:23:36.80976737 +0000 UTC m=+460.217407859 I0914 16:23:36.810117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:36.810149 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-14 16:23:36.810146196 +0000 UTC m=+460.217786685 I0914 16:23:36.820663 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-14 16:23:36.820653427 +0000 UTC m=+460.228293916 I0914 16:23:36.820917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:36.820933 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-14 16:23:36.820931111 +0000 UTC m=+460.228571590 I0914 16:23:36.824147 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-14 16:23:36.824140756 +0000 UTC m=+460.231781245 I0914 16:23:36.825291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:36.825320 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-14 16:23:36.825315136 +0000 UTC m=+460.232955625 I0914 16:23:36.853765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:36.853807 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:36.853822 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-14 16:23:36.853817715 +0000 UTC m=+460.261458204 I0914 16:23:36.856733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:36.856804 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:36.856832 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-14 16:23:36.856826746 +0000 UTC m=+460.264467225 I0914 16:23:36.857404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:36.857479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:36.857492 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-14 16:23:36.857489168 +0000 UTC m=+460.265129657 I0914 16:23:36.972573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:36.980895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fx7lv" condition "Approved" to 2026-09-14 16:23:36.980882435 +0000 UTC m=+460.388522934 I0914 16:23:36.999159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fx7lv" condition "Ready" to 2026-09-14 16:23:36.999152138 +0000 UTC m=+460.406792617 I0914 16:23:37.031004 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:23:37.030994894 +0000 UTC m=+460.438635383 I0914 16:23:37.049082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:37.049304 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:23:37.049296648 +0000 UTC m=+460.456937147 I0914 16:23:37.066635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:37.069262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:37.214927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g9prk" condition "Approved" to 2026-09-14 16:23:37.214917425 +0000 UTC m=+460.622557914 I0914 16:23:37.215676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:37.224074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4wfk6" condition "Approved" to 2026-09-14 16:23:37.224066802 +0000 UTC m=+460.631707291 I0914 16:23:37.229638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g9prk" condition "Ready" to 2026-09-14 16:23:37.229633658 +0000 UTC m=+460.637274137 I0914 16:23:37.358807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4wfk6" condition "Ready" to 2026-09-14 16:23:37.35879749 +0000 UTC m=+460.766437979 I0914 16:23:37.901187 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:23:37.901163452 +0000 UTC m=+461.308803971 I0914 16:23:37.959150 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:23:37.959128576 +0000 UTC m=+461.366769115 I0914 16:23:38.097749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:38.204384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:38.204889 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:23:38.204882622 +0000 UTC m=+461.612523121 I0914 16:23:38.500674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:44.999023 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" condition "Ready" to 2026-09-14 16:23:44.999010615 +0000 UTC m=+468.406651094 I0914 16:23:44.999615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:44.999663 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" condition "Issuing" to 2026-09-14 16:23:44.999653735 +0000 UTC m=+468.407294234 I0914 16:23:45.026386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:45.026708 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" condition "Ready" to 2026-09-14 16:23:45.02644706 +0000 UTC m=+468.434087549 I0914 16:23:45.231483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:45.261160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sbkcp-8lrmx" condition "Approved" to 2026-09-14 16:23:45.261144333 +0000 UTC m=+468.668784822 I0914 16:23:45.283632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sbkcp-8lrmx" condition "Ready" to 2026-09-14 16:23:45.283614444 +0000 UTC m=+468.691254923 I0914 16:23:45.315050 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:23:45.315040977 +0000 UTC m=+468.722681466 I0914 16:23:45.334795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:45.335329 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:23:45.335324582 +0000 UTC m=+468.742965071 I0914 16:23:45.350169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbkcp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:58.328277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:58.328315 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-14 16:23:58.328306273 +0000 UTC m=+481.735946782 I0914 16:23:58.328349 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-14 16:23:58.328340454 +0000 UTC m=+481.735980953 I0914 16:23:58.340787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:58.340870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:23:58.340894 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-14 16:23:58.340889134 +0000 UTC m=+481.748529633 I0914 16:23:58.508781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:23:58.520152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tgvfp" condition "Approved" to 2026-09-14 16:23:58.520141862 +0000 UTC m=+481.927782351 I0914 16:23:58.540985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tgvfp" condition "Ready" to 2026-09-14 16:23:58.540977791 +0000 UTC m=+481.948618280 I0914 16:23:58.587611 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:23:58.587284825 +0000 UTC m=+481.994925314 I0914 16:23:58.604519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:27:11.626103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:27:11.626148 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-14 16:27:11.626140108 +0000 UTC m=+675.033780627 I0914 16:27:11.626101 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-14 16:27:11.626074167 +0000 UTC m=+675.033714696 I0914 16:27:11.650476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:27:11.650697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:27:11.650723 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-14 16:27:11.650716896 +0000 UTC m=+675.058357385 I0914 16:27:11.869160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nz9hh" condition "Approved" to 2026-09-14 16:27:11.869142653 +0000 UTC m=+675.276783172 I0914 16:27:11.888868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nz9hh" condition "Ready" to 2026-09-14 16:27:11.888857158 +0000 UTC m=+675.296497677 I0914 16:27:11.928170 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:27:11.928157366 +0000 UTC m=+675.335797865 I0914 16:27:11.952797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:27:11.953353 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:27:11.953345853 +0000 UTC m=+675.360986352 I0914 16:27:11.960533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:27:11.980162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:27:54.964655 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-14 16:27:54.964639604 +0000 UTC m=+718.372280123 I0914 16:27:54.965240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:27:54.965266 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-14 16:27:54.965260047 +0000 UTC m=+718.372900576 I0914 16:27:54.984523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:27:54.984788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0914 16:27:54.984845 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-14 16:27:54.984811104 +0000 UTC m=+718.392451623 I0914 16:27:55.164236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:27:55.178258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dd5k4" condition "Approved" to 2026-09-14 16:27:55.178247378 +0000 UTC m=+718.585887877 I0914 16:27:55.201135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-dd5k4" condition "Ready" to 2026-09-14 16:27:55.20112419 +0000 UTC m=+718.608764689 I0914 16:27:55.236580 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:27:55.236569302 +0000 UTC m=+718.644209811 I0914 16:27:55.253126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0914 16:27:55.253431 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-14 16:27:55.253426144 +0000 UTC m=+718.661066633 I0914 16:27:55.269425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"