I0908 18:57:08.219767 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0908 18:57:08.219939 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0908 18:57:08.224696 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0908 18:57:08.224731 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0908 18:57:08.224765 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0908 18:57:08.225240 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0908 18:57:08.225328 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0908 18:57:08.225362 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0908 18:57:08.232081 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0908 18:57:08.247740 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0908 18:57:08.253018 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0908 18:57:08.258018 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0908 18:57:08.262796 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0908 18:57:08.267842 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0908 18:57:08.267894 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0908 18:57:08.267967 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0908 18:57:08.273085 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0908 18:57:08.273268 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0908 18:57:08.279173 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0908 18:57:08.286547 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0908 18:57:08.290707 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0908 18:57:08.299025 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0908 18:57:08.302451 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0908 18:57:08.307406 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0908 18:57:08.313055 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0908 18:57:08.316914 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0908 18:57:08.316961 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0908 18:57:08.321287 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0908 18:57:08.329694 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0908 18:57:08.335629 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0908 18:57:08.341509 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0908 18:57:08.346768 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0908 18:57:08.346847 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0908 18:57:08.346845 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0908 18:57:08.352725 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.352758 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.353239 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.354273 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.354561 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.354945 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.385612 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.404432 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.424113 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.445989 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:08.470882 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 18:57:18.954186 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-08 18:57:18.954155698 +0000 UTC m=+10.768704926 I0908 18:57:19.696426 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-08 18:57:19.696413592 +0000 UTC m=+11.510962810 I0908 18:57:19.697075 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 18:57:19.697105 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-08 18:57:19.697098411 +0000 UTC m=+11.511647639 I0908 18:57:19.712702 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 18:57:19.713027 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-08 18:57:19.713012195 +0000 UTC m=+11.527561423 E0908 18:57:19.713582 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 18:57:19.714008 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-08 18:57:19.713997388 +0000 UTC m=+11.528546606 E0908 18:57:19.714134 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 18:57:19.727507 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0908 18:57:19.728138 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 18:57:19.728182 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 18:57:19.728200 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0908 18:57:19.734333 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 18:57:19.763487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-08 18:57:19.763471483 +0000 UTC m=+11.578020701 I0908 18:57:19.788793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-08 18:57:19.788777712 +0000 UTC m=+11.603326930 I0908 18:57:19.811552 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 18:57:19.811537941 +0000 UTC m=+11.626087139 I0908 18:57:19.827895 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 18:57:19.828250 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 18:57:19.828243486 +0000 UTC m=+11.642792684 I0908 18:57:19.843968 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 18:57:24.728968 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 18:57:24.728948087 +0000 UTC m=+16.543497305 I0908 18:57:49.612050 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-08 18:57:49.612033153 +0000 UTC m=+41.426582361 I0908 18:57:49.612922 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 18:57:49.613005 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-08 18:57:49.612993925 +0000 UTC m=+41.427543153 I0908 18:57:49.636480 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-08 18:57:49.636464814 +0000 UTC m=+41.451014042 I0908 18:57:49.643751 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 18:57:49.644664 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-08 18:57:49.644649887 +0000 UTC m=+41.459199085 I0908 18:57:49.925990 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 18:57:49.965497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-08 18:57:49.965481932 +0000 UTC m=+41.780031150 I0908 18:57:50.009666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-08 18:57:50.009651937 +0000 UTC m=+41.824201155 I0908 18:57:50.054802 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 18:57:50.054767664 +0000 UTC m=+41.869316852 I0908 18:57:50.075572 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 18:57:50.130657 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:03:02.657812 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-28.nip.io-tls" condition "Ready" to 2026-09-08 19:03:02.657794462 +0000 UTC m=+354.472343670 I0908 19:03:02.657847 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-28.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:03:02.657945 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-28.nip.io-tls" condition "Issuing" to 2026-09-08 19:03:02.657932026 +0000 UTC m=+354.472481244 I0908 19:03:02.676766 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-28.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-28.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:03:02.676905 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-28.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:03:02.676966 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-28.nip.io-tls" condition "Issuing" to 2026-09-08 19:03:02.676956541 +0000 UTC m=+354.491505739 I0908 19:03:02.914368 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-28.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-28.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:03:02.933877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-28.nip.io-tls-1" condition "Approved" to 2026-09-08 19:03:02.933853012 +0000 UTC m=+354.748402220 I0908 19:03:02.956562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-28.nip.io-tls-1" condition "Ready" to 2026-09-08 19:03:02.956546361 +0000 UTC m=+354.771095589 I0908 19:03:02.978028 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-28.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:03:02.97799852 +0000 UTC m=+354.792547718 I0908 19:03:02.994897 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-28.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-28.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:03:02.995740 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-28.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:03:02.995729412 +0000 UTC m=+354.810278630 I0908 19:03:03.002736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-28.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-28.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:03:03.014150 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-28.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-28.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:04:11.112030 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:04:11.112023 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-08 19:04:11.112004342 +0000 UTC m=+422.926553560 I0908 19:04:11.112111 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-08 19:04:11.112102844 +0000 UTC m=+422.926652062 I0908 19:04:11.124992 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0908 19:04:11.125014 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 19:04:11.125267 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-08 19:04:11.125226465 +0000 UTC m=+422.939775693 E0908 19:04:11.125334 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 19:04:11.125440 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:04:11.125522 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-08 19:04:11.12550821 +0000 UTC m=+422.940057438 E0908 19:04:11.135475 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0908 19:04:11.135787 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 19:04:11.135889 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 19:04:11.135939 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0908 19:04:11.172285 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:04:11.180946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-08 19:04:11.180932654 +0000 UTC m=+422.995481842 I0908 19:04:11.196508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-08 19:04:11.196493856 +0000 UTC m=+423.011043054 I0908 19:04:11.218234 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:04:11.218216736 +0000 UTC m=+423.032765954 I0908 19:04:11.229775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:04:11.230138 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:04:11.230131488 +0000 UTC m=+423.044680676 I0908 19:04:11.247689 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:04:16.136921 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:04:16.136899108 +0000 UTC m=+427.951448326 I0908 19:05:00.153765 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-08 19:05:00.153743002 +0000 UTC m=+471.968292180 I0908 19:05:00.154298 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:05:00.154350 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-08 19:05:00.154341122 +0000 UTC m=+471.968890310 I0908 19:05:00.154357 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:05:00.154407 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-08 19:05:00.154395913 +0000 UTC m=+471.968945111 I0908 19:05:00.154679 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-08 19:05:00.154672557 +0000 UTC m=+471.969221735 I0908 19:05:00.161636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-08 19:05:00.161618165 +0000 UTC m=+471.976167353 I0908 19:05:00.162396 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:05:00.162466 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-08 19:05:00.162422847 +0000 UTC m=+471.976972055 I0908 19:05:00.205602 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:00.205682 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:05:00.205708 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-08 19:05:00.205701537 +0000 UTC m=+472.020250725 I0908 19:05:00.205953 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:00.206195 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:05:00.206217 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-08 19:05:00.206214165 +0000 UTC m=+472.020763353 I0908 19:05:00.220166 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:00.220275 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-08 19:05:00.220266793 +0000 UTC m=+472.034815981 I0908 19:05:00.471877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-08 19:05:00.471858786 +0000 UTC m=+472.286407974 I0908 19:05:00.486654 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:00.491910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-08 19:05:00.491902197 +0000 UTC m=+472.306451385 I0908 19:05:00.565038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-08 19:05:00.565020178 +0000 UTC m=+472.379569366 I0908 19:05:00.573731 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:00.573715262 +0000 UTC m=+472.388264450 I0908 19:05:00.578085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-08 19:05:00.57807718 +0000 UTC m=+472.392626368 I0908 19:05:00.585704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-08 19:05:00.585593627 +0000 UTC m=+472.400142825 I0908 19:05:00.607037 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:00.607383 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:00.607377873 +0000 UTC m=+472.421927061 I0908 19:05:00.610189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-08 19:05:00.610181597 +0000 UTC m=+472.424730785 I0908 19:05:00.900368 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:00.900349598 +0000 UTC m=+472.714898796 I0908 19:05:01.096504 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:01.148361 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:01.296337 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:01.297018 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:01.297008383 +0000 UTC m=+473.111557561 I0908 19:05:01.370523 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:01.370512821 +0000 UTC m=+473.185062029 I0908 19:05:01.695972 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:01.696819 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:01.696805166 +0000 UTC m=+473.511354394 I0908 19:05:01.746031 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:01.793876 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:02.044508 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:08.630428 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" condition "Ready" to 2026-09-08 19:05:08.630410524 +0000 UTC m=+480.444959742 I0908 19:05:08.631097 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:05:08.631118 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" condition "Issuing" to 2026-09-08 19:05:08.631112485 +0000 UTC m=+480.445661693 I0908 19:05:08.641760 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:08.641892 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" condition "Ready" to 2026-09-08 19:05:08.64188496 +0000 UTC m=+480.456434168 I0908 19:05:08.793575 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:08.821729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls-1" condition "Approved" to 2026-09-08 19:05:08.821715329 +0000 UTC m=+480.636264527 I0908 19:05:08.847613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls-1" condition "Ready" to 2026-09-08 19:05:08.847601628 +0000 UTC m=+480.662150856 I0908 19:05:08.882797 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:08.882777088 +0000 UTC m=+480.697326266 I0908 19:05:08.895251 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:08.895755 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:08.895747058 +0000 UTC m=+480.710296246 I0908 19:05:08.925633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:08.926320 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jjn2r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:08.926310738 +0000 UTC m=+480.740859926 I0908 19:05:22.300106 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:05:22.300137 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-08 19:05:22.300130397 +0000 UTC m=+494.114679585 I0908 19:05:22.300381 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-08 19:05:22.300377062 +0000 UTC m=+494.114926250 I0908 19:05:22.315609 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:22.316090 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-08 19:05:22.316083211 +0000 UTC m=+494.130632399 I0908 19:05:22.451240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:22.482926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-08 19:05:22.482912335 +0000 UTC m=+494.297461533 I0908 19:05:22.533790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-08 19:05:22.533780622 +0000 UTC m=+494.348329820 I0908 19:05:22.570844 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:22.570827966 +0000 UTC m=+494.385377164 I0908 19:05:22.579964 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:05:22.580411 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:05:22.580404503 +0000 UTC m=+494.394953691 I0908 19:05:22.596290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:08:40.109320 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-08 19:08:40.10930427 +0000 UTC m=+691.923853488 I0908 19:08:40.109532 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:08:40.109671 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-08 19:08:40.109660102 +0000 UTC m=+691.924209330 I0908 19:08:40.123635 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:08:40.123803 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:08:40.123902 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-08 19:08:40.123887515 +0000 UTC m=+691.938436743 I0908 19:08:40.404838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-08 19:08:40.404815247 +0000 UTC m=+692.219364465 I0908 19:08:40.421774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-08 19:08:40.421764605 +0000 UTC m=+692.236313803 I0908 19:08:40.445319 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:08:40.445112503 +0000 UTC m=+692.259661701 I0908 19:08:40.464785 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:08:40.465331 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:08:40.465324493 +0000 UTC m=+692.279873671 I0908 19:08:40.480885 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:09:25.204165 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-08 19:09:25.20415463 +0000 UTC m=+737.018703818 I0908 19:09:25.204334 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:09:25.204399 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-08 19:09:25.204388646 +0000 UTC m=+737.018937864 I0908 19:09:25.216309 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:09:25.216358 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 19:09:25.216374 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-08 19:09:25.216368412 +0000 UTC m=+737.030917610 I0908 19:09:25.519154 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:09:25.531289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-08 19:09:25.531274969 +0000 UTC m=+737.345824187 I0908 19:09:25.549228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-08 19:09:25.549218627 +0000 UTC m=+737.363767825 I0908 19:09:25.572856 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 19:09:25.572842788 +0000 UTC m=+737.387392017 I0908 19:09:25.586534 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 19:09:25.597157 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"