I0813 08:31:00.697228 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0813 08:31:00.697514 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0813 08:31:00.703246 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0813 08:31:00.703283 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0813 08:31:00.703295 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0813 08:31:00.703766 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0813 08:31:00.704032 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0813 08:31:00.705058 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0813 08:31:00.711012 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0813 08:31:00.725828 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0813 08:31:00.730431 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0813 08:31:00.733513 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0813 08:31:00.740651 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0813 08:31:00.743531 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0813 08:31:00.746311 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0813 08:31:00.748623 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0813 08:31:00.750798 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0813 08:31:00.750824 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0813 08:31:00.750922 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0813 08:31:00.755593 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0813 08:31:00.757705 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0813 08:31:00.759693 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0813 08:31:00.761588 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0813 08:31:00.761711 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0813 08:31:00.763697 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0813 08:31:00.765471 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0813 08:31:00.765623 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0813 08:31:00.767781 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0813 08:31:00.775023 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0813 08:31:00.778166 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0813 08:31:00.781219 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0813 08:31:00.784008 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0813 08:31:00.784031 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0813 08:31:00.784064 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0813 08:31:00.788635 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.788920 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.789232 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.789533 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.789764 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.790365 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.790490 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.790847 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.790829 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.791096 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:00.791334 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:31:15.783657 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-13 08:31:15.783612795 +0000 UTC m=+15.122014005 I0813 08:31:16.525224 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-13 08:31:16.525211354 +0000 UTC m=+15.863612544 I0813 08:31:16.525516 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:31:16.525564 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-13 08:31:16.525555386 +0000 UTC m=+15.863956576 I0813 08:31:16.542483 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:31:16.542578 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-13 08:31:16.542568932 +0000 UTC m=+15.880970122 E0813 08:31:16.549437 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0813 08:31:16.549555 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-13 08:31:16.549544101 +0000 UTC m=+15.887945291 E0813 08:31:16.549579 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0813 08:31:16.562567 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0813 08:31:16.566700 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0813 08:31:16.566839 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0813 08:31:16.566886 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0813 08:31:16.566928 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0813 08:31:16.599038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-13 08:31:16.599019555 +0000 UTC m=+15.937420745 I0813 08:31:16.626394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-13 08:31:16.626376499 +0000 UTC m=+15.964777689 I0813 08:31:16.662922 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:31:16.662906312 +0000 UTC m=+16.001307512 I0813 08:31:16.687367 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:31:16.688821 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:31:16.688806943 +0000 UTC m=+16.027208163 I0813 08:31:16.705221 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:31:21.568106 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:31:21.568096514 +0000 UTC m=+20.906497694 I0813 08:31:48.749230 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:31:48.749303 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-13 08:31:48.749294461 +0000 UTC m=+48.087695651 I0813 08:31:48.749607 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-13 08:31:48.749599353 +0000 UTC m=+48.088000543 I0813 08:31:48.762920 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-13 08:31:48.762870278 +0000 UTC m=+48.101271478 I0813 08:31:48.768422 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:31:48.769212 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:31:48.769296 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-13 08:31:48.769287293 +0000 UTC m=+48.107688533 I0813 08:31:48.938560 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:31:48.952324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-13 08:31:48.952314007 +0000 UTC m=+48.290715197 I0813 08:31:48.977209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-13 08:31:48.977196615 +0000 UTC m=+48.315597805 I0813 08:31:49.003317 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:31:49.003299631 +0000 UTC m=+48.341700841 I0813 08:31:49.027157 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:31:49.027980 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:31:49.027970475 +0000 UTC m=+48.366371665 I0813 08:31:49.034406 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:31:49.041946 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:38:01.813516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-95.nip.io-tls" condition "Ready" to 2026-08-13 08:38:01.813503788 +0000 UTC m=+421.151904958 I0813 08:38:01.813802 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:38:01.813861 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-95.nip.io-tls" condition "Issuing" to 2026-08-13 08:38:01.813852293 +0000 UTC m=+421.152253483 I0813 08:38:01.826674 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:38:01.826734 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:38:01.826751 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-95.nip.io-tls" condition "Issuing" to 2026-08-13 08:38:01.82674637 +0000 UTC m=+421.165147550 I0813 08:38:02.023864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-95.nip.io-tls-1" condition "Approved" to 2026-08-13 08:38:02.023848302 +0000 UTC m=+421.362249522 I0813 08:38:02.041730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-95.nip.io-tls-1" condition "Ready" to 2026-08-13 08:38:02.041716228 +0000 UTC m=+421.380117418 I0813 08:38:02.066790 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:38:02.066777089 +0000 UTC m=+421.405178279 I0813 08:38:02.089099 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:38:02.091269 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:38:02.091257649 +0000 UTC m=+421.429658839 I0813 08:38:02.098952 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:38:02.107047 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:39:09.671063 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-13 08:39:09.671046421 +0000 UTC m=+489.009447631 I0813 08:39:09.671507 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:39:09.671834 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-13 08:39:09.671818763 +0000 UTC m=+489.010220003 E0813 08:39:09.725977 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0813 08:39:09.726045 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-13 08:39:09.726035276 +0000 UTC m=+489.064436466 E0813 08:39:09.726067 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0813 08:39:09.730053 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:39:09.730148 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-13 08:39:09.730138694 +0000 UTC m=+489.068539884 E0813 08:39:09.737716 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0813 08:39:09.737827 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0813 08:39:09.737877 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0813 08:39:09.737926 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0813 08:39:09.746744 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:39:09.770703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-13 08:39:09.770686985 +0000 UTC m=+489.109088175 I0813 08:39:09.786537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-13 08:39:09.786518789 +0000 UTC m=+489.124919969 I0813 08:39:09.896385 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:39:09.896366956 +0000 UTC m=+489.234768156 I0813 08:39:09.912190 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:39:09.912429 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:39:09.912419723 +0000 UTC m=+489.250820903 I0813 08:39:09.930911 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:39:14.738327 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:39:14.738301073 +0000 UTC m=+494.076702283 I0813 08:40:00.533536 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-13 08:40:00.533519479 +0000 UTC m=+539.871920649 I0813 08:40:00.533703 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:40:00.533852 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-13 08:40:00.533842234 +0000 UTC m=+539.872243414 I0813 08:40:00.560935 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:40:00.560982 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-13 08:40:00.560972052 +0000 UTC m=+539.899373232 I0813 08:40:00.561344 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-13 08:40:00.561340307 +0000 UTC m=+539.899741487 I0813 08:40:00.577306 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-13 08:40:00.577287487 +0000 UTC m=+539.915688657 I0813 08:40:00.577688 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:40:00.577703 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-13 08:40:00.577700432 +0000 UTC m=+539.916101612 I0813 08:40:00.601940 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:00.604148 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-13 08:40:00.60411021 +0000 UTC m=+539.942511380 I0813 08:40:00.622694 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:00.636628 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:40:00.636673 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-13 08:40:00.63666545 +0000 UTC m=+539.975066630 I0813 08:40:00.638458 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:00.648397 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:40:00.648427 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-13 08:40:00.648420035 +0000 UTC m=+539.986821205 I0813 08:40:00.936118 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:00.962197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-13 08:40:00.962185205 +0000 UTC m=+540.300586385 I0813 08:40:00.991279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-13 08:40:00.991267508 +0000 UTC m=+540.329668688 I0813 08:40:01.048418 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:01.048404102 +0000 UTC m=+540.386805292 I0813 08:40:01.096771 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:01.097408 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:01.097399987 +0000 UTC m=+540.435801157 I0813 08:40:01.256844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:01.257360 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:01.381125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-13 08:40:01.381111626 +0000 UTC m=+540.719512816 I0813 08:40:01.403203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-13 08:40:01.403189707 +0000 UTC m=+540.741590877 I0813 08:40:01.404788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-13 08:40:01.404782438 +0000 UTC m=+540.743183618 I0813 08:40:01.468364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-13 08:40:01.468337176 +0000 UTC m=+540.806738366 I0813 08:40:01.702811 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:01.702790795 +0000 UTC m=+541.041192005 I0813 08:40:01.835197 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:01.835177731 +0000 UTC m=+541.173578911 I0813 08:40:01.835408 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:01.835851 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:01.835844249 +0000 UTC m=+541.174245429 I0813 08:40:01.961149 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:01.961810 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:01.961800879 +0000 UTC m=+541.300202069 I0813 08:40:02.074859 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:02.311660 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:17.002722 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" condition "Ready" to 2026-08-13 08:40:17.002699454 +0000 UTC m=+556.341100644 I0813 08:40:17.003149 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:40:17.003208 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" condition "Issuing" to 2026-08-13 08:40:17.003192231 +0000 UTC m=+556.341593421 I0813 08:40:17.017472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:17.017765 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:40:17.017818 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" condition "Issuing" to 2026-08-13 08:40:17.01780894 +0000 UTC m=+556.356210130 I0813 08:40:17.488573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls-1" condition "Approved" to 2026-08-13 08:40:17.488556783 +0000 UTC m=+556.826958003 I0813 08:40:17.538716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls-1" condition "Ready" to 2026-08-13 08:40:17.538701674 +0000 UTC m=+556.877102864 I0813 08:40:17.580793 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:17.580777379 +0000 UTC m=+556.919178569 I0813 08:40:17.598575 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:17.599298 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:17.599287069 +0000 UTC m=+556.937688259 I0813 08:40:17.619693 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:17.620026 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t6dwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:31.789425 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-13 08:40:31.789408633 +0000 UTC m=+571.127809823 I0813 08:40:31.789830 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:40:31.789856 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-13 08:40:31.789852409 +0000 UTC m=+571.128253599 I0813 08:40:31.802708 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:31.803749 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-13 08:40:31.803723926 +0000 UTC m=+571.142125156 I0813 08:40:31.915187 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:31.948881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-13 08:40:31.948857384 +0000 UTC m=+571.287258574 I0813 08:40:31.968367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-13 08:40:31.968353233 +0000 UTC m=+571.306754423 I0813 08:40:32.001404 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:40:32.001391946 +0000 UTC m=+571.339793126 I0813 08:40:32.023060 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:40:32.073198 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:43:59.652033 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:43:59.652113 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-13 08:43:59.652102202 +0000 UTC m=+778.990503392 I0813 08:43:59.652165 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-13 08:43:59.652136163 +0000 UTC m=+778.990537353 I0813 08:43:59.672485 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:43:59.672734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-13 08:43:59.672721341 +0000 UTC m=+779.011122531 I0813 08:44:00.021295 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:44:00.054668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-13 08:44:00.054648108 +0000 UTC m=+779.393049288 I0813 08:44:00.075845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-13 08:44:00.07582847 +0000 UTC m=+779.414229660 I0813 08:44:00.105014 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:44:00.104996204 +0000 UTC m=+779.443397394 I0813 08:44:00.120874 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:44:00.121639 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:44:00.121629642 +0000 UTC m=+779.460030822 I0813 08:44:00.142006 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:44:47.961346 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:44:47.961410 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-13 08:44:47.961402641 +0000 UTC m=+827.299803831 I0813 08:44:47.961412 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-13 08:44:47.961400191 +0000 UTC m=+827.299801401 I0813 08:44:47.979725 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:44:47.980031 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:44:47.980146 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-13 08:44:47.980135787 +0000 UTC m=+827.318536987 I0813 08:44:48.115436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-13 08:44:48.115424961 +0000 UTC m=+827.453826151 I0813 08:44:48.131850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-13 08:44:48.131839837 +0000 UTC m=+827.470241017 I0813 08:44:48.163134 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:44:48.16311817 +0000 UTC m=+827.501519360 I0813 08:44:48.179659 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:44:48.180390 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:44:48.180382075 +0000 UTC m=+827.518783265 I0813 08:44:48.202375 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"