I0811 08:11:05.970634 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0811 08:11:05.970833 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0811 08:11:05.973938 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0811 08:11:05.973960 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0811 08:11:05.973969 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0811 08:11:05.974349 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0811 08:11:05.974474 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0811 08:11:05.974545 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0811 08:11:05.978657 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0811 08:11:05.995334 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0811 08:11:05.998868 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0811 08:11:05.999003 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0811 08:11:06.001702 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0811 08:11:06.004577 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0811 08:11:06.009635 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0811 08:11:06.012031 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0811 08:11:06.014388 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0811 08:11:06.017045 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0811 08:11:06.019386 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0811 08:11:06.021198 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0811 08:11:06.026127 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0811 08:11:06.027867 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0811 08:11:06.029466 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0811 08:11:06.032173 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0811 08:11:06.033210 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0811 08:11:06.034778 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0811 08:11:06.034793 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0811 08:11:06.034798 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0811 08:11:06.034802 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0811 08:11:06.034806 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0811 08:11:06.035112 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0811 08:11:06.036654 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0811 08:11:06.043760 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0811 08:11:06.047982 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0811 08:11:06.049972 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.050024 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.050517 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.050882 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.050954 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.066778 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.085921 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.102183 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.120730 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.140839 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:06.159518 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:11:19.664099 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-11 08:11:19.664069027 +0000 UTC m=+13.718374339 I0811 08:11:20.332518 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-11 08:11:20.332493549 +0000 UTC m=+14.386798851 I0811 08:11:20.333739 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:11:20.333808 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-11 08:11:20.333800878 +0000 UTC m=+14.388106180 E0811 08:11:20.348246 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 08:11:20.348275 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-11 08:11:20.348270237 +0000 UTC m=+14.402575509 E0811 08:11:20.348366 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 08:11:20.348814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:11:20.348848 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:11:20.348919 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-11 08:11:20.348856617 +0000 UTC m=+14.403161879 E0811 08:11:20.356557 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0811 08:11:20.356712 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 08:11:20.356752 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 08:11:20.356797 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0811 08:11:20.392264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-11 08:11:20.392246928 +0000 UTC m=+14.446552240 I0811 08:11:20.413586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-11 08:11:20.413575018 +0000 UTC m=+14.467880300 I0811 08:11:20.439027 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:11:20.439016343 +0000 UTC m=+14.493321625 I0811 08:11:20.451342 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:11:20.451843 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:11:20.451835635 +0000 UTC m=+14.506140917 I0811 08:11:20.462877 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:11:25.357729 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:11:25.357716687 +0000 UTC m=+19.412021999 I0811 08:11:48.852882 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-11 08:11:48.852855025 +0000 UTC m=+42.907160307 I0811 08:11:48.853469 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:11:48.853552 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-11 08:11:48.853527534 +0000 UTC m=+42.907832806 I0811 08:11:48.866886 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:11:48.866972 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:11:48.867034 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-11 08:11:48.867011455 +0000 UTC m=+42.921316737 I0811 08:11:48.868252 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-11 08:11:48.868246204 +0000 UTC m=+42.922551486 I0811 08:11:49.018380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-11 08:11:49.018355787 +0000 UTC m=+43.072661099 I0811 08:11:49.046111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-11 08:11:49.04609612 +0000 UTC m=+43.100401432 I0811 08:11:49.072585 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:11:49.072577143 +0000 UTC m=+43.126882425 I0811 08:11:49.084631 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:11:49.085085 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:11:49.085077946 +0000 UTC m=+43.139383228 I0811 08:11:49.091979 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:11:49.102172 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:16:07.913038 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-63.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:16:07.913110 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Issuing" to 2026-08-11 08:16:07.913080824 +0000 UTC m=+301.967386106 I0811 08:16:07.913438 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Ready" to 2026-08-11 08:16:07.913426633 +0000 UTC m=+301.967731905 I0811 08:16:07.924631 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-63.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-63.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:16:07.924756 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-63.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:16:07.924827 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Issuing" to 2026-08-11 08:16:07.924819228 +0000 UTC m=+301.979124510 I0811 08:16:08.111671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-63.nip.io-tls-1" condition "Approved" to 2026-08-11 08:16:08.111651261 +0000 UTC m=+302.165956573 I0811 08:16:08.130896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-63.nip.io-tls-1" condition "Ready" to 2026-08-11 08:16:08.130881125 +0000 UTC m=+302.185186407 I0811 08:16:08.156784 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:16:08.156772409 +0000 UTC m=+302.211077681 I0811 08:16:08.167659 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-63.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-63.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:16:08.169040 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-63.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:16:08.169008873 +0000 UTC m=+302.223314155 I0811 08:16:08.176024 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-63.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-63.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:16:08.192508 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-63.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-63.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:17:11.978871 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-11 08:17:11.978833959 +0000 UTC m=+366.033139241 I0811 08:17:11.979044 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:17:11.979163 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-11 08:17:11.979148218 +0000 UTC m=+366.033453520 E0811 08:17:12.006004 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 08:17:12.006136 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-11 08:17:12.006125922 +0000 UTC m=+366.060431204 E0811 08:17:12.006203 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 08:17:12.007789 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:17:12.008025 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:17:12.008066 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-11 08:17:12.008053309 +0000 UTC m=+366.062358601 E0811 08:17:12.049489 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0811 08:17:12.050036 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 08:17:12.050135 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 08:17:12.050168 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0811 08:17:12.143718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-11 08:17:12.143702963 +0000 UTC m=+366.198008235 I0811 08:17:12.166482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-11 08:17:12.166468592 +0000 UTC m=+366.220773874 I0811 08:17:12.187592 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:17:12.187573823 +0000 UTC m=+366.241879105 I0811 08:17:12.201686 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:17:12.231374 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:17:12.239469 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:17:17.051256 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:17:17.05124205 +0000 UTC m=+371.105547352 I0811 08:18:01.657480 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:01.657555 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-11 08:18:01.657520735 +0000 UTC m=+415.711826007 I0811 08:18:01.658092 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-11 08:18:01.658084935 +0000 UTC m=+415.712390207 I0811 08:18:01.658114 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:01.658355 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-11 08:18:01.658348215 +0000 UTC m=+415.712653497 I0811 08:18:01.658131 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-11 08:18:01.658127265 +0000 UTC m=+415.712432537 I0811 08:18:01.825059 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:01.829162 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-11 08:18:01.829149501 +0000 UTC m=+415.883454773 I0811 08:18:01.830287 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:01.831663 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:01.831751 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-11 08:18:01.831734537 +0000 UTC m=+415.886039859 I0811 08:18:01.835140 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-11 08:18:01.835131232 +0000 UTC m=+415.889436504 I0811 08:18:01.843731 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-11 08:18:01.84371465 +0000 UTC m=+415.898019942 I0811 08:18:01.867865 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:01.870676 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-11 08:18:01.870654473 +0000 UTC m=+415.924959775 I0811 08:18:02.101467 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:02.144918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-11 08:18:02.144905078 +0000 UTC m=+416.199210360 I0811 08:18:02.168663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-11 08:18:02.168645775 +0000 UTC m=+416.222951077 I0811 08:18:02.190362 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:02.199463 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:02.225573 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:02.225556997 +0000 UTC m=+416.279862279 I0811 08:18:02.238976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-11 08:18:02.238961628 +0000 UTC m=+416.293266910 I0811 08:18:02.242001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-11 08:18:02.241980285 +0000 UTC m=+416.296285567 I0811 08:18:02.246274 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:02.248104 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:02.248093266 +0000 UTC m=+416.302398548 I0811 08:18:02.258970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-11 08:18:02.258961472 +0000 UTC m=+416.313266744 I0811 08:18:02.259310 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:02.271682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-11 08:18:02.271670744 +0000 UTC m=+416.325976026 I0811 08:18:02.492185 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:02.820893 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:02.820877982 +0000 UTC m=+416.875183254 I0811 08:18:02.842801 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:02.842784462 +0000 UTC m=+416.897089764 I0811 08:18:02.989652 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:02.990392 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:02.990381389 +0000 UTC m=+417.044686691 I0811 08:18:03.086622 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:03.087513 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:03.087502997 +0000 UTC m=+417.141808309 I0811 08:18:03.441148 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:03.489655 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:03.590832 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:12.410680 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" condition "Ready" to 2026-08-11 08:18:12.410658923 +0000 UTC m=+426.464964235 I0811 08:18:12.411544 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:12.411641 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" condition "Issuing" to 2026-08-11 08:18:12.411630061 +0000 UTC m=+426.465935373 I0811 08:18:12.425577 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6thgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:12.425688 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:12.425739 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" condition "Issuing" to 2026-08-11 08:18:12.425732932 +0000 UTC m=+426.480038214 I0811 08:18:12.684829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6thgr-tls-1" condition "Approved" to 2026-08-11 08:18:12.684817747 +0000 UTC m=+426.739123029 I0811 08:18:12.705923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6thgr-tls-1" condition "Ready" to 2026-08-11 08:18:12.705909098 +0000 UTC m=+426.760214380 I0811 08:18:12.759655 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:12.759645255 +0000 UTC m=+426.813950537 I0811 08:18:12.775196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6thgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:12.775752 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:12.775741893 +0000 UTC m=+426.830047845 I0811 08:18:12.800040 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6thgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6thgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:32.015428 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:32.015989 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-11 08:18:32.015935022 +0000 UTC m=+446.070240354 I0811 08:18:32.016685 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-11 08:18:32.016672411 +0000 UTC m=+446.070977733 I0811 08:18:32.043561 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:32.043726 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:32.043797 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-11 08:18:32.043785474 +0000 UTC m=+446.098090786 I0811 08:18:32.682830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-11 08:18:32.682816918 +0000 UTC m=+446.737122230 I0811 08:18:32.724025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-11 08:18:32.724009912 +0000 UTC m=+446.778315204 I0811 08:18:32.793527 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:32.793508807 +0000 UTC m=+446.847814119 I0811 08:18:33.066060 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:33.197762 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:21:55.845048 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-11 08:21:55.845027093 +0000 UTC m=+649.899332405 I0811 08:21:55.845061 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:21:55.845287 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-11 08:21:55.845270743 +0000 UTC m=+649.899576045 I0811 08:21:55.866877 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:21:55.866971 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-11 08:21:55.866963315 +0000 UTC m=+649.921268597 I0811 08:21:55.983781 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:21:56.027105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-11 08:21:56.02709169 +0000 UTC m=+650.081396972 I0811 08:21:56.050316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-11 08:21:56.050302178 +0000 UTC m=+650.104607460 I0811 08:21:56.075842 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:21:56.075831095 +0000 UTC m=+650.130136367 I0811 08:21:56.095568 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:21:56.096479 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:21:56.096469726 +0000 UTC m=+650.150775008 I0811 08:21:56.124541 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:22:43.970859 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:22:43.970892 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-11 08:22:43.970884942 +0000 UTC m=+698.025190224 I0811 08:22:43.971491 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-11 08:22:43.971476153 +0000 UTC m=+698.025781435 I0811 08:22:43.984023 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:22:43.984651 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-11 08:22:43.984636269 +0000 UTC m=+698.038941551 I0811 08:22:44.121834 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:22:44.163436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-11 08:22:44.163424491 +0000 UTC m=+698.217729773 I0811 08:22:44.179408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-11 08:22:44.179397297 +0000 UTC m=+698.233702579 I0811 08:22:44.209632 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:22:44.209622481 +0000 UTC m=+698.263927753 I0811 08:22:44.222803 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:22:44.223960 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:22:44.223949615 +0000 UTC m=+698.278254887 I0811 08:22:44.242004 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:22:44.244267 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"