I0901 18:26:34.764424 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0901 18:26:34.764563 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0901 18:26:34.764724 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0901 18:26:34.771960 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0901 18:26:34.772555 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0901 18:26:34.772617 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0901 18:26:34.772786 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0901 18:26:34.776377 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0901 18:26:34.788515 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0901 18:26:34.791263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0901 18:26:34.793420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0901 18:26:34.797630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0901 18:26:34.799752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0901 18:26:34.801609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0901 18:26:34.803213 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0901 18:26:34.803231 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0901 18:26:34.803327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0901 18:26:34.805105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0901 18:26:34.807295 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0901 18:26:34.808966 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0901 18:26:34.809004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0901 18:26:34.810824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0901 18:26:34.817905 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0901 18:26:34.819701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0901 18:26:34.821468 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0901 18:26:34.821739 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0901 18:26:34.823551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0901 18:26:34.825236 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0901 18:26:34.826780 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0901 18:26:34.826840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0901 18:26:34.828696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0901 18:26:34.830267 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0901 18:26:34.830300 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0901 18:26:34.833739 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.834950 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.836034 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.836225 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.836871 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.837050 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.837592 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.838907 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.839768 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:34.939912 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 18:26:45.581547 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-01 18:26:45.581528808 +0000 UTC m=+10.855011411 I0901 18:26:46.340739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:26:46.340787 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-01 18:26:46.340776113 +0000 UTC m=+11.614258716 I0901 18:26:46.341304 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 18:26:46.341250362 +0000 UTC m=+11.614733005 E0901 18:26:46.356332 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 18:26:46.356381 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-01 18:26:46.35637566 +0000 UTC m=+11.629858223 E0901 18:26:46.356420 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 18:26:46.367800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:26:46.367879 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 18:26:46.367873621 +0000 UTC m=+11.641356184 E0901 18:26:46.375724 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0901 18:26:46.376231 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 18:26:46.376498 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 18:26:46.376677 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0901 18:26:46.387095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:26:46.414520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p7qhb" condition "Approved" to 2026-09-01 18:26:46.414507268 +0000 UTC m=+11.687989871 I0901 18:26:46.432824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p7qhb" condition "Ready" to 2026-09-01 18:26:46.432816204 +0000 UTC m=+11.706298767 I0901 18:26:46.463528 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:26:46.463515088 +0000 UTC m=+11.736997691 I0901 18:26:46.497271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:26:46.497755 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:26:46.497747238 +0000 UTC m=+11.771229821 I0901 18:26:46.517427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:26:46.518269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:26:46.518783 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:26:46.518772264 +0000 UTC m=+11.792254857 I0901 18:26:51.376769 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:26:51.376758752 +0000 UTC m=+16.650241325 I0901 18:27:14.222268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:27:14.222283 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-01 18:27:14.222274941 +0000 UTC m=+39.495757504 I0901 18:27:14.222321 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-01 18:27:14.222316181 +0000 UTC m=+39.495798744 I0901 18:27:14.250284 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-01 18:27:14.250264748 +0000 UTC m=+39.523747341 I0901 18:27:14.251568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:27:14.251846 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-01 18:27:14.251835653 +0000 UTC m=+39.525318246 I0901 18:27:14.374833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:27:14.690919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j8t7v" condition "Approved" to 2026-09-01 18:27:14.690910297 +0000 UTC m=+39.964392870 I0901 18:27:14.716247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j8t7v" condition "Ready" to 2026-09-01 18:27:14.716236902 +0000 UTC m=+39.989719465 E0901 18:27:14.716309 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-h9hjr not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-h9hjr\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-j8t7v" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" E0901 18:27:14.777033 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-h9hjr not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-h9hjr\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-j8t7v" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" I0901 18:27:14.865579 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" resource_name="rabbitmq-messaging-topology-operator-webhook" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-j8t7v" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-h9hjr" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" I0901 18:27:14.887929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j8cg4" condition "Approved" to 2026-09-01 18:27:14.88792049 +0000 UTC m=+40.161403053 I0901 18:27:14.903533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j8cg4" condition "Ready" to 2026-09-01 18:27:14.903524218 +0000 UTC m=+40.177006781 I0901 18:27:14.931598 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:27:14.931578257 +0000 UTC m=+40.205060830 I0901 18:27:14.953416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:27:14.953683 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:27:14.953677711 +0000 UTC m=+40.227160284 I0901 18:27:14.981001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:27:14.981509 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:27:14.981500466 +0000 UTC m=+40.254983039 I0901 18:32:16.121006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-66.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:32:16.121052 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-66.nip.io-tls" condition "Issuing" to 2026-09-01 18:32:16.121040516 +0000 UTC m=+341.394523119 I0901 18:32:16.121346 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-66.nip.io-tls" condition "Ready" to 2026-09-01 18:32:16.121327972 +0000 UTC m=+341.394810585 I0901 18:32:16.142186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:32:16.142260 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-66.nip.io-tls" condition "Ready" to 2026-09-01 18:32:16.142249933 +0000 UTC m=+341.415732526 I0901 18:32:16.391380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:32:16.421775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-66.nip.io-tls-gnr52" condition "Approved" to 2026-09-01 18:32:16.421768199 +0000 UTC m=+341.695250772 I0901 18:32:16.457375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-66.nip.io-tls-gnr52" condition "Ready" to 2026-09-01 18:32:16.457368114 +0000 UTC m=+341.730850687 I0901 18:32:16.486439 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-66.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:32:16.486414805 +0000 UTC m=+341.759897358 I0901 18:32:16.508254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:32:16.557901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:33:24.085407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-01 18:33:24.085386005 +0000 UTC m=+409.358868608 I0901 18:33:24.085790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:33:24.085863 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-01 18:33:24.085855974 +0000 UTC m=+409.359338577 E0901 18:33:24.100479 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 18:33:24.100555 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-01 18:33:24.100545962 +0000 UTC m=+409.374028555 E0901 18:33:24.100596 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 18:33:24.108939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:33:24.109062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:33:24.109094 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-01 18:33:24.109085656 +0000 UTC m=+409.382568249 E0901 18:33:24.114843 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0901 18:33:24.114949 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 18:33:24.114983 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 18:33:24.115044 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0901 18:33:24.167236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:33:24.175156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-b9sxb" condition "Approved" to 2026-09-01 18:33:24.175141588 +0000 UTC m=+409.448624181 I0901 18:33:24.189239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-b9sxb" condition "Ready" to 2026-09-01 18:33:24.189230404 +0000 UTC m=+409.462712977 I0901 18:33:24.216114 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:33:24.21609806 +0000 UTC m=+409.489580653 I0901 18:33:24.231548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:33:24.232031 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:33:24.231997463 +0000 UTC m=+409.505480066 I0901 18:33:24.254548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:33:29.115365 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:33:29.115343561 +0000 UTC m=+414.388826164 I0901 18:34:10.702005 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-01 18:34:10.70199666 +0000 UTC m=+455.975479223 I0901 18:34:10.702512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:34:10.702543 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-01 18:34:10.702540241 +0000 UTC m=+455.976022794 I0901 18:34:10.734753 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-01 18:34:10.734744792 +0000 UTC m=+456.008227355 I0901 18:34:10.734925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:34:10.734942 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-01 18:34:10.734939525 +0000 UTC m=+456.008422088 I0901 18:34:10.735880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:34:10.735899 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-01 18:34:10.735895694 +0000 UTC m=+456.009378257 I0901 18:34:10.736200 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-01 18:34:10.73619621 +0000 UTC m=+456.009678773 I0901 18:34:10.775381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:10.775478 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-01 18:34:10.775471715 +0000 UTC m=+456.048954278 I0901 18:34:10.792592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:10.792662 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-01 18:34:10.7926573 +0000 UTC m=+456.066139863 I0901 18:34:10.794665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:10.794788 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-01 18:34:10.794781241 +0000 UTC m=+456.068263804 I0901 18:34:10.883011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:10.900285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7jbf7" condition "Approved" to 2026-09-01 18:34:10.900276831 +0000 UTC m=+456.173759394 I0901 18:34:10.914447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7jbf7" condition "Ready" to 2026-09-01 18:34:10.914438609 +0000 UTC m=+456.187921172 I0901 18:34:10.919781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:10.935570 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:10.93556067 +0000 UTC m=+456.209043223 I0901 18:34:10.946909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lhddr" condition "Approved" to 2026-09-01 18:34:10.946897615 +0000 UTC m=+456.220380178 I0901 18:34:10.958496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:10.963954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:11.005123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lhddr" condition "Ready" to 2026-09-01 18:34:11.00511233 +0000 UTC m=+456.278595023 I0901 18:34:11.102336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qpwkk" condition "Approved" to 2026-09-01 18:34:11.10232463 +0000 UTC m=+456.375807193 I0901 18:34:11.175761 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:11.175753741 +0000 UTC m=+456.449236294 I0901 18:34:11.355898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qpwkk" condition "Ready" to 2026-09-01 18:34:11.355889173 +0000 UTC m=+456.629371736 I0901 18:34:11.700756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:11.701249 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:11.701238423 +0000 UTC m=+456.974721026 I0901 18:34:12.168639 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:12.168603322 +0000 UTC m=+457.442085915 I0901 18:34:12.175373 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:12.175363479 +0000 UTC m=+457.448846072 I0901 18:34:12.197528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:12.251188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:12.298931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:12.402141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:20.304996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:34:20.305084 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" condition "Issuing" to 2026-09-01 18:34:20.305074868 +0000 UTC m=+465.578557461 I0901 18:34:20.305375 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" condition "Ready" to 2026-09-01 18:34:20.305357514 +0000 UTC m=+465.578840087 I0901 18:34:20.326326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:20.326595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:34:20.326623 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" condition "Issuing" to 2026-09-01 18:34:20.326615641 +0000 UTC m=+465.600098214 I0901 18:34:20.546650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8l9rh-j78hb" condition "Approved" to 2026-09-01 18:34:20.546640143 +0000 UTC m=+465.820122706 I0901 18:34:20.562551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8l9rh-j78hb" condition "Ready" to 2026-09-01 18:34:20.56254315 +0000 UTC m=+465.836025713 I0901 18:34:20.593450 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:20.593436739 +0000 UTC m=+465.866919302 I0901 18:34:20.624888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:20.625240 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:20.625234515 +0000 UTC m=+465.898717078 I0901 18:34:20.653348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8l9rh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:34.127771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:34:34.127796 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-01 18:34:34.127790422 +0000 UTC m=+479.401272995 I0901 18:34:34.127965 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-01 18:34:34.127920665 +0000 UTC m=+479.401403258 I0901 18:34:34.165970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:34:34.166085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:34:34.166629 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-01 18:34:34.166106128 +0000 UTC m=+479.439588721 I0901 18:34:34.344917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-trl4f" condition "Approved" to 2026-09-01 18:34:34.344903634 +0000 UTC m=+479.618386187 I0901 18:34:34.368718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-trl4f" condition "Ready" to 2026-09-01 18:34:34.368709843 +0000 UTC m=+479.642192406 I0901 18:34:34.400797 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:34:34.400782353 +0000 UTC m=+479.674264946 I0901 18:34:34.420885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:37:57.816163 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-01 18:37:57.816135015 +0000 UTC m=+683.089617678 I0901 18:37:57.816409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:37:57.816601 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-01 18:37:57.816586576 +0000 UTC m=+683.090069169 I0901 18:37:57.841053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:37:57.841144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:37:57.841169 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-01 18:37:57.841160918 +0000 UTC m=+683.114643511 I0901 18:37:58.080957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cpfnv" condition "Approved" to 2026-09-01 18:37:58.080945943 +0000 UTC m=+683.354428506 I0901 18:37:58.106592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cpfnv" condition "Ready" to 2026-09-01 18:37:58.106579341 +0000 UTC m=+683.380061914 I0901 18:37:58.127577 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:37:58.127563748 +0000 UTC m=+683.401046311 I0901 18:37:58.143939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:38:40.888286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 18:38:40.888348 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-01 18:38:40.88833971 +0000 UTC m=+726.161822303 I0901 18:38:40.888667 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-01 18:38:40.888655333 +0000 UTC m=+726.162137956 I0901 18:38:40.913929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:38:40.914055 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-01 18:38:40.914014519 +0000 UTC m=+726.187497102 I0901 18:38:41.033843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 18:38:41.062375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tdpfb" condition "Approved" to 2026-09-01 18:38:41.062365433 +0000 UTC m=+726.335847996 I0901 18:38:41.080016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tdpfb" condition "Ready" to 2026-09-01 18:38:41.08000832 +0000 UTC m=+726.353490873 I0901 18:38:41.109489 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 18:38:41.109480152 +0000 UTC m=+726.382962705 I0901 18:38:41.134209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"