I0907 03:26:52.527357 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0907 03:26:52.527806 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0907 03:26:52.527990 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0907 03:26:52.535791 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0907 03:26:52.536330 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0907 03:26:52.536476 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0907 03:26:52.536478 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0907 03:26:52.546208 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0907 03:26:52.569937 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0907 03:26:52.574887 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0907 03:26:52.577971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0907 03:26:52.583277 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0907 03:26:52.583361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0907 03:26:52.587083 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0907 03:26:52.589851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0907 03:26:52.592376 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0907 03:26:52.594926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0907 03:26:52.597808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0907 03:26:52.605286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0907 03:26:52.610700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0907 03:26:52.616551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0907 03:26:52.622681 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0907 03:26:52.623177 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0907 03:26:52.628014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0907 03:26:52.632760 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0907 03:26:52.632830 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0907 03:26:52.645611 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0907 03:26:52.645668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0907 03:26:52.648316 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0907 03:26:52.648349 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0907 03:26:52.648374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0907 03:26:52.651231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0907 03:26:52.653873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0907 03:26:52.663706 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.664218 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.664667 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.687594 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.700910 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.715306 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.758154 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.777782 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.793051 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:26:52.801360 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 03:27:08.106781 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 03:27:08.10676153 +0000 UTC m=+15.642095750 I0907 03:27:08.948572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:27:08.948693 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 03:27:08.948660653 +0000 UTC m=+16.483994873 I0907 03:27:08.948770 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 03:27:08.948759185 +0000 UTC m=+16.484093395 E0907 03:27:08.972228 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 03:27:08.972313 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 03:27:08.972301306 +0000 UTC m=+16.507635516 E0907 03:27:08.972344 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 03:27:08.977013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:27:08.977423 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 03:27:08.97741146 +0000 UTC m=+16.512745680 E0907 03:27:08.984838 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0907 03:27:08.985076 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:27:08.985156 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:27:08.985212 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0907 03:27:09.007009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:27:09.048947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dgdb4" condition "Approved" to 2026-09-07 03:27:09.048928755 +0000 UTC m=+16.584262975 I0907 03:27:09.072978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dgdb4" condition "Ready" to 2026-09-07 03:27:09.072960133 +0000 UTC m=+16.608294343 I0907 03:27:09.108198 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:27:09.108181444 +0000 UTC m=+16.643515654 I0907 03:27:09.136074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:27:09.197905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:27:13.986220 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:27:13.986189768 +0000 UTC m=+21.521523978 I0907 03:27:39.998375 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 03:27:39.998350776 +0000 UTC m=+47.533684956 I0907 03:27:39.998812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:27:39.998856 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 03:27:39.998850344 +0000 UTC m=+47.534184524 I0907 03:27:40.037755 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 03:27:40.037741244 +0000 UTC m=+47.573075434 I0907 03:27:40.042235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:27:40.042293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:27:40.042313 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 03:27:40.042308356 +0000 UTC m=+47.577642536 I0907 03:27:40.229489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kgfcv" condition "Approved" to 2026-09-07 03:27:40.229475072 +0000 UTC m=+47.764809252 I0907 03:27:40.263112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kgfcv" condition "Ready" to 2026-09-07 03:27:40.26309427 +0000 UTC m=+47.798428450 I0907 03:27:40.302035 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:27:40.30201247 +0000 UTC m=+47.837346650 I0907 03:27:40.327924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:27:40.328290 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:27:40.328283273 +0000 UTC m=+47.863617453 I0907 03:27:40.349138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:27:40.369116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:33:01.124769 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-121.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:33:01.124806 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Issuing" to 2026-09-07 03:33:01.124799242 +0000 UTC m=+368.660133462 I0907 03:33:01.124788 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Ready" to 2026-09-07 03:33:01.124773721 +0000 UTC m=+368.660107931 I0907 03:33:01.145940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:33:01.146149 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Ready" to 2026-09-07 03:33:01.146138251 +0000 UTC m=+368.681472471 I0907 03:33:01.363516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:33:01.398005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-121.nip.io-tls-nqx9v" condition "Approved" to 2026-09-07 03:33:01.397989614 +0000 UTC m=+368.933323804 I0907 03:33:01.436528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-121.nip.io-tls-nqx9v" condition "Ready" to 2026-09-07 03:33:01.436506435 +0000 UTC m=+368.971840675 I0907 03:33:01.470223 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:33:01.470168734 +0000 UTC m=+369.005502914 I0907 03:33:01.490102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:33:01.490708 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:33:01.490695306 +0000 UTC m=+369.026029516 I0907 03:33:01.519168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:33:01.519695 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:33:01.519679867 +0000 UTC m=+369.055014077 I0907 03:33:01.522121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:09.494336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:34:09.494481 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 03:34:09.494468829 +0000 UTC m=+437.029803049 I0907 03:34:09.494399 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 03:34:09.494386228 +0000 UTC m=+437.029720448 E0907 03:34:09.510530 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 03:34:09.510679 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 03:34:09.510669253 +0000 UTC m=+437.046003433 E0907 03:34:09.511014 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 03:34:09.526371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:09.526847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:34:09.526996 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 03:34:09.526971878 +0000 UTC m=+437.062306448 E0907 03:34:09.534762 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0907 03:34:09.534879 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:34:09.534943 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 03:34:09.534989 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0907 03:34:09.580914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-f9zqr" condition "Approved" to 2026-09-07 03:34:09.580895678 +0000 UTC m=+437.116229868 I0907 03:34:09.597317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-f9zqr" condition "Ready" to 2026-09-07 03:34:09.597301555 +0000 UTC m=+437.132635735 I0907 03:34:09.693177 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:34:09.69315796 +0000 UTC m=+437.228492140 I0907 03:34:09.738031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:09.849017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:14.536303 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:34:14.536283823 +0000 UTC m=+442.071618043 I0907 03:34:59.548710 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 03:34:59.548691606 +0000 UTC m=+487.084025786 I0907 03:34:59.549640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:34:59.549662 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 03:34:59.549659003 +0000 UTC m=+487.084993183 I0907 03:34:59.551348 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 03:34:59.551329552 +0000 UTC m=+487.086663742 I0907 03:34:59.551367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:34:59.553387 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 03:34:59.553352978 +0000 UTC m=+487.088687178 I0907 03:34:59.575509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:34:59.575545 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 03:34:59.57553609 +0000 UTC m=+487.110870270 I0907 03:34:59.575933 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 03:34:59.575926847 +0000 UTC m=+487.111261027 I0907 03:34:59.727426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:59.727480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:34:59.727502 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 03:34:59.727496053 +0000 UTC m=+487.262830223 I0907 03:34:59.739349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:59.739456 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 03:34:59.739447674 +0000 UTC m=+487.274781844 I0907 03:34:59.740781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:59.740852 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 03:34:59.740848428 +0000 UTC m=+487.276182608 I0907 03:34:59.845508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:59.876177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ngpjl" condition "Approved" to 2026-09-07 03:34:59.876164207 +0000 UTC m=+487.411498387 I0907 03:34:59.896918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ngpjl" condition "Ready" to 2026-09-07 03:34:59.896892823 +0000 UTC m=+487.432227003 I0907 03:34:59.913829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:59.930825 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:34:59.930804972 +0000 UTC m=+487.466139152 I0907 03:34:59.945990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9ghxz" condition "Approved" to 2026-09-07 03:34:59.945954759 +0000 UTC m=+487.481288939 I0907 03:34:59.950875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:34:59.958766 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:34:59.958753586 +0000 UTC m=+487.494087766 I0907 03:34:59.979954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9ghxz" condition "Ready" to 2026-09-07 03:34:59.979933829 +0000 UTC m=+487.515268009 I0907 03:34:59.993017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mr7bv" condition "Approved" to 2026-09-07 03:34:59.99299861 +0000 UTC m=+487.528332790 I0907 03:35:00.000451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:00.136769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:00.384468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mr7bv" condition "Ready" to 2026-09-07 03:35:00.384456253 +0000 UTC m=+487.919790433 I0907 03:35:00.429428 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:35:00.429407306 +0000 UTC m=+487.964741486 I0907 03:35:00.727670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:00.728280 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:35:00.728269147 +0000 UTC m=+488.263603357 I0907 03:35:00.831812 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:35:00.831790263 +0000 UTC m=+488.367124463 I0907 03:35:01.079551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:01.080606 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:35:01.080593459 +0000 UTC m=+488.615927649 I0907 03:35:01.126248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:01.379488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:08.748995 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls" condition "Ready" to 2026-09-07 03:35:08.748974981 +0000 UTC m=+496.284309161 I0907 03:35:08.749344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:35:08.749355 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls" condition "Issuing" to 2026-09-07 03:35:08.749352848 +0000 UTC m=+496.284687028 I0907 03:35:08.765444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:08.765566 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls" condition "Ready" to 2026-09-07 03:35:08.765558091 +0000 UTC m=+496.300892271 I0907 03:35:08.960562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:08.993730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pr9gg-7xg2v" condition "Approved" to 2026-09-07 03:35:08.993714934 +0000 UTC m=+496.529049114 I0907 03:35:09.017152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pr9gg-7xg2v" condition "Ready" to 2026-09-07 03:35:09.017139064 +0000 UTC m=+496.552473244 I0907 03:35:09.045081 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:35:09.045063153 +0000 UTC m=+496.580397333 I0907 03:35:09.064726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pr9gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:22.958771 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 03:35:22.958755023 +0000 UTC m=+510.494089203 I0907 03:35:22.959201 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:35:22.959445 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 03:35:22.959433644 +0000 UTC m=+510.494767874 I0907 03:35:22.977576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:22.977695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:35:22.977727 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 03:35:22.97772088 +0000 UTC m=+510.513055060 I0907 03:35:23.233953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:23.243112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7nmdg" condition "Approved" to 2026-09-07 03:35:23.243100624 +0000 UTC m=+510.778434804 I0907 03:35:23.265373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7nmdg" condition "Ready" to 2026-09-07 03:35:23.265359419 +0000 UTC m=+510.800693599 I0907 03:35:23.294671 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:35:23.294656484 +0000 UTC m=+510.829990664 I0907 03:35:23.326383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:35:23.388426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:35.815407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:35.815476 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 03:38:35.815465245 +0000 UTC m=+703.350799465 I0907 03:38:35.815557 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 03:38:35.815534308 +0000 UTC m=+703.350868528 I0907 03:38:35.844198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:35.844629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:38:35.844723 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 03:38:35.844660507 +0000 UTC m=+703.379994727 I0907 03:38:36.037819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-k6kcz" condition "Approved" to 2026-09-07 03:38:36.037809462 +0000 UTC m=+703.573143642 I0907 03:38:36.067584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-k6kcz" condition "Ready" to 2026-09-07 03:38:36.067570292 +0000 UTC m=+703.602904482 I0907 03:38:36.099337 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:36.099325274 +0000 UTC m=+703.634659464 I0907 03:38:36.129698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:36.131477 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:36.13146794 +0000 UTC m=+703.666802130 I0907 03:38:36.135534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:36.149041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:38:36.149407 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:38:36.149400604 +0000 UTC m=+703.684734784 I0907 03:39:18.124626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:39:18.124796 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 03:39:18.124778127 +0000 UTC m=+745.660112337 I0907 03:39:18.125496 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-07 03:39:18.12548276 +0000 UTC m=+745.660816980 I0907 03:39:18.153952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:39:18.154292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 03:39:18.154336 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 03:39:18.154326119 +0000 UTC m=+745.689660329 I0907 03:39:18.499936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bl6cz" condition "Approved" to 2026-09-07 03:39:18.499920233 +0000 UTC m=+746.035254413 I0907 03:39:18.538364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-bl6cz" condition "Ready" to 2026-09-07 03:39:18.538348 +0000 UTC m=+746.073682180 I0907 03:39:18.574133 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 03:39:18.574114159 +0000 UTC m=+746.109448339 I0907 03:39:18.604210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 03:39:18.667007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"