I0910 17:45:13.512957 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 17:45:13.513388 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 17:45:13.518121 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 17:45:13.518176 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0910 17:45:13.518194 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0910 17:45:13.518703 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0910 17:45:13.518796 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 17:45:13.518866 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 17:45:13.522961 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 17:45:13.538626 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 17:45:13.544578 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 17:45:13.552430 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 17:45:13.555333 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 17:45:13.559015 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 17:45:13.563046 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 17:45:13.567320 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 17:45:13.572975 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 17:45:13.573022 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 17:45:13.573042 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 17:45:13.573139 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 17:45:13.577864 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 17:45:13.581993 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 17:45:13.586225 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 17:45:13.590435 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 17:45:13.590466 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 17:45:13.590571 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0910 17:45:13.594626 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 17:45:13.598908 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 17:45:13.604650 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 17:45:13.608996 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 17:45:13.613095 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 17:45:13.617188 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 17:45:13.621390 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 17:45:13.621426 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 17:45:13.624066 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.624334 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.625264 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.625781 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.626991 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.648253 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.674811 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.696441 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.722681 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.743163 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:13.765585 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:45:27.379591 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 17:45:27.379567892 +0000 UTC m=+13.911481838 I0910 17:45:28.126828 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 17:45:28.126812917 +0000 UTC m=+14.658726843 I0910 17:45:28.126893 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:45:28.127194 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 17:45:28.127180031 +0000 UTC m=+14.659093977 E0910 17:45:28.142609 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 17:45:28.142755 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 17:45:28.142738082 +0000 UTC m=+14.674652028 E0910 17:45:28.142794 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 17:45:28.144827 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:45:28.148151 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:45:28.148228 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 17:45:28.148211628 +0000 UTC m=+14.680125584 E0910 17:45:28.155389 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0910 17:45:28.155597 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 17:45:28.155757 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 17:45:28.155943 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0910 17:45:28.249981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-10 17:45:28.249970294 +0000 UTC m=+14.781884220 I0910 17:45:28.289878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-10 17:45:28.289867395 +0000 UTC m=+14.821781311 I0910 17:45:28.313635 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:45:28.31362294 +0000 UTC m=+14.845536866 I0910 17:45:28.327471 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:45:28.363785 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:45:33.156797 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:45:33.156780001 +0000 UTC m=+19.688693957 I0910 17:45:56.268936 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 17:45:56.268914682 +0000 UTC m=+42.800828638 I0910 17:45:56.269283 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:45:56.269367 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 17:45:56.269340976 +0000 UTC m=+42.801254922 I0910 17:45:56.286391 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:45:56.286585 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 17:45:56.286575583 +0000 UTC m=+42.818489539 I0910 17:45:56.289741 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 17:45:56.289721333 +0000 UTC m=+42.821635279 I0910 17:45:56.565623 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:45:56.605035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-10 17:45:56.605019074 +0000 UTC m=+43.136933000 I0910 17:45:56.708624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-10 17:45:56.708581779 +0000 UTC m=+43.240495735 I0910 17:45:56.738045 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:45:56.738028423 +0000 UTC m=+43.269942379 I0910 17:45:56.755846 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:45:56.756420 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:45:56.756403259 +0000 UTC m=+43.288317185 I0910 17:45:56.771741 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:45:56.777902 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:50:38.197320 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-191.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:50:38.197368 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-191.nip.io-tls" condition "Issuing" to 2026-09-10 17:50:38.197360326 +0000 UTC m=+324.729274272 I0910 17:50:38.197741 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-191.nip.io-tls" condition "Ready" to 2026-09-10 17:50:38.197726235 +0000 UTC m=+324.729640211 I0910 17:50:38.209519 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:50:38.209575 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-191.nip.io-tls" condition "Ready" to 2026-09-10 17:50:38.209568292 +0000 UTC m=+324.741482228 I0910 17:50:38.331425 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:50:38.365439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-191.nip.io-tls-1" condition "Approved" to 2026-09-10 17:50:38.365425067 +0000 UTC m=+324.897338993 I0910 17:50:38.379409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-191.nip.io-tls-1" condition "Ready" to 2026-09-10 17:50:38.37939832 +0000 UTC m=+324.911312236 I0910 17:50:38.405304 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-191.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:50:38.405292664 +0000 UTC m=+324.937206600 I0910 17:50:38.420992 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:50:38.421662 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-191.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:50:38.421652719 +0000 UTC m=+324.953566645 I0910 17:50:38.444679 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-191.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-191.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:51:45.284478 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 17:51:45.284468392 +0000 UTC m=+391.816382308 I0910 17:51:45.284869 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:51:45.285023 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 17:51:45.285013013 +0000 UTC m=+391.816926969 E0910 17:51:45.295134 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 17:51:45.295178 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 17:51:45.295173257 +0000 UTC m=+391.827087163 E0910 17:51:45.295193 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 17:51:45.296361 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:51:45.296620 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:51:45.296721 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 17:51:45.296678445 +0000 UTC m=+391.828592391 E0910 17:51:45.306707 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0910 17:51:45.306801 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 17:51:45.306824 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 17:51:45.306848 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0910 17:51:45.330989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-10 17:51:45.330974599 +0000 UTC m=+391.862888525 I0910 17:51:45.343045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-10 17:51:45.343037208 +0000 UTC m=+391.874951124 I0910 17:51:45.368947 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:51:45.368937359 +0000 UTC m=+391.900851275 I0910 17:51:45.383168 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:51:45.433489 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:51:50.307323 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:51:50.307304212 +0000 UTC m=+396.839218148 I0910 17:52:30.385441 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 17:52:30.385432064 +0000 UTC m=+436.917345980 I0910 17:52:30.385468 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:30.385724 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 17:52:30.385719869 +0000 UTC m=+436.917633785 I0910 17:52:30.394624 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:30.394703 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 17:52:30.394696728 +0000 UTC m=+436.926610634 I0910 17:52:30.394832 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:30.394850 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 17:52:30.394847001 +0000 UTC m=+436.926760907 I0910 17:52:30.395817 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 17:52:30.395813197 +0000 UTC m=+436.927727133 I0910 17:52:30.396780 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 17:52:30.396776443 +0000 UTC m=+436.928690369 I0910 17:52:30.415870 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:30.418104 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:30.418872 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 17:52:30.418864062 +0000 UTC m=+436.950777998 I0910 17:52:30.436243 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:30.438359 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:30.439785 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 17:52:30.43977769 +0000 UTC m=+436.971691606 I0910 17:52:30.439402 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:30.450204 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 17:52:30.450189234 +0000 UTC m=+436.982103170 I0910 17:52:30.586892 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:30.598615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-10 17:52:30.598601458 +0000 UTC m=+437.130515374 I0910 17:52:30.614756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-10 17:52:30.614748408 +0000 UTC m=+437.146662324 I0910 17:52:30.616091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-10 17:52:30.616082879 +0000 UTC m=+437.147996805 I0910 17:52:30.620163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-10 17:52:30.620156398 +0000 UTC m=+437.152070314 I0910 17:52:30.627253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-10 17:52:30.627244796 +0000 UTC m=+437.159158712 I0910 17:52:30.630373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-10 17:52:30.630366348 +0000 UTC m=+437.162280264 I0910 17:52:30.790197 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:30.790178013 +0000 UTC m=+437.322091969 I0910 17:52:30.931932 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:30.931907535 +0000 UTC m=+437.463821451 I0910 17:52:31.078098 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:31.078583 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:31.078577879 +0000 UTC m=+437.610491795 I0910 17:52:31.132527 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:31.132514547 +0000 UTC m=+437.664428473 I0910 17:52:31.226655 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:31.227320 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:31.227313045 +0000 UTC m=+437.759226971 I0910 17:52:31.579580 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:31.580076 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:31.580070096 +0000 UTC m=+438.111984012 I0910 17:52:31.826900 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:31.875831 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:32.026870 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:32.077701 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:32.229409 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:39.087477 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" condition "Ready" to 2026-09-10 17:52:39.087463256 +0000 UTC m=+445.619377182 I0910 17:52:39.087570 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:39.087590 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" condition "Issuing" to 2026-09-10 17:52:39.087585938 +0000 UTC m=+445.619499854 I0910 17:52:39.098702 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-df2b4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:39.098786 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:39.098814 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" condition "Issuing" to 2026-09-10 17:52:39.098807834 +0000 UTC m=+445.630721760 I0910 17:52:39.327513 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-df2b4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:39.346409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-df2b4-tls-1" condition "Approved" to 2026-09-10 17:52:39.346386871 +0000 UTC m=+445.878300857 I0910 17:52:39.368176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-df2b4-tls-1" condition "Ready" to 2026-09-10 17:52:39.368165319 +0000 UTC m=+445.900079245 I0910 17:52:39.408316 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:39.408305678 +0000 UTC m=+445.940219594 I0910 17:52:39.420021 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-df2b4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:39.421422 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:39.421411763 +0000 UTC m=+445.953325699 I0910 17:52:39.444528 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-df2b4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-df2b4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:50.556619 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:50.556656 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 17:52:50.556648324 +0000 UTC m=+457.088562240 I0910 17:52:50.556787 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 17:52:50.556759926 +0000 UTC m=+457.088673842 I0910 17:52:50.568431 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:50.568941 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:52:50.568981 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 17:52:50.568958682 +0000 UTC m=+457.100872598 I0910 17:52:50.734942 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:52:50.768619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-10 17:52:50.768610387 +0000 UTC m=+457.300524303 I0910 17:52:50.814154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-10 17:52:50.814145923 +0000 UTC m=+457.346059829 I0910 17:52:50.843873 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:52:50.843863983 +0000 UTC m=+457.375777889 I0910 17:52:50.859901 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:56:17.152253 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:56:17.152312 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 17:56:17.152303413 +0000 UTC m=+663.684217339 I0910 17:56:17.152684 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 17:56:17.152667654 +0000 UTC m=+663.684581610 I0910 17:56:17.174504 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:56:17.174778 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 17:56:17.174762469 +0000 UTC m=+663.706676425 I0910 17:56:17.371839 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:56:17.407824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-10 17:56:17.407811028 +0000 UTC m=+663.939724954 I0910 17:56:17.423786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-10 17:56:17.423775673 +0000 UTC m=+663.955689579 I0910 17:56:17.456530 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:56:17.456521465 +0000 UTC m=+663.988435371 I0910 17:56:17.471004 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:56:17.500358 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:57:01.376293 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:57:01.376344 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-10 17:57:01.376332552 +0000 UTC m=+707.908246498 I0910 17:57:01.376460 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-10 17:57:01.376448756 +0000 UTC m=+707.908362712 I0910 17:57:01.394969 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:57:01.395024 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:57:01.395040 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-10 17:57:01.395034454 +0000 UTC m=+707.926948370 I0910 17:57:01.648302 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:57:01.653505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-10 17:57:01.653497908 +0000 UTC m=+708.185411824 I0910 17:57:01.669832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-10 17:57:01.669827014 +0000 UTC m=+708.201740930 I0910 17:57:01.698242 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:57:01.69820857 +0000 UTC m=+708.230122486 I0910 17:57:01.714881 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:57:01.748152 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"