I0831 07:21:37.453775 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0831 07:21:37.453956 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0831 07:21:37.457922 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0831 07:21:37.457947 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0831 07:21:37.457958 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0831 07:21:37.477812 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0831 07:21:37.477842 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0831 07:21:37.477865 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0831 07:21:37.483716 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0831 07:21:37.496431 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0831 07:21:37.507063 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0831 07:21:37.509213 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0831 07:21:37.509237 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0831 07:21:37.509243 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0831 07:21:37.509335 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0831 07:21:37.511541 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0831 07:21:37.513474 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0831 07:21:37.520096 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0831 07:21:37.541808 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0831 07:21:37.544403 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0831 07:21:37.546929 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0831 07:21:37.547124 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0831 07:21:37.549717 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0831 07:21:37.552272 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0831 07:21:37.556949 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0831 07:21:37.561208 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0831 07:21:37.565268 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0831 07:21:37.569012 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0831 07:21:37.569058 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0831 07:21:37.573208 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0831 07:21:37.577422 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0831 07:21:37.581608 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0831 07:21:37.586119 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0831 07:21:37.587534 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0831 07:21:37.591122 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.591320 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.591725 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.591948 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.592256 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.594010 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.611328 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.632911 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.653163 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.675443 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:37.696361 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 07:21:48.273487 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-31 07:21:48.273457703 +0000 UTC m=+10.851253162 I0831 07:21:48.996294 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-31 07:21:48.996279947 +0000 UTC m=+11.574075406 I0831 07:21:48.996574 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:21:48.996629 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-31 07:21:48.996623386 +0000 UTC m=+11.574418805 E0831 07:21:49.007859 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0831 07:21:49.007914 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-31 07:21:49.007904316 +0000 UTC m=+11.585699755 E0831 07:21:49.007962 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0831 07:21:49.008683 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:21:49.008842 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:21:49.008916 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-31 07:21:49.00890684 +0000 UTC m=+11.586702299 E0831 07:21:49.021324 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0831 07:21:49.022762 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0831 07:21:49.022793 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0831 07:21:49.022857 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0831 07:21:49.056407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-31 07:21:49.056394792 +0000 UTC m=+11.634190231 I0831 07:21:49.074653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-31 07:21:49.074645607 +0000 UTC m=+11.652441026 I0831 07:21:49.097398 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:21:49.09738748 +0000 UTC m=+11.675182899 I0831 07:21:49.109342 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:21:49.109999 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:21:49.10998827 +0000 UTC m=+11.687783689 I0831 07:21:49.117168 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:21:49.123753 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:21:54.022103 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:21:54.022087953 +0000 UTC m=+16.599883412 I0831 07:22:22.258392 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:22:22.258510 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-31 07:22:22.258497248 +0000 UTC m=+44.836292717 I0831 07:22:22.259160 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-31 07:22:22.25915187 +0000 UTC m=+44.836947329 I0831 07:22:22.275258 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:22:22.275859 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-31 07:22:22.275837897 +0000 UTC m=+44.853633356 I0831 07:22:22.276884 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-31 07:22:22.276874047 +0000 UTC m=+44.854669496 I0831 07:22:22.438772 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:22:22.472301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-31 07:22:22.472285254 +0000 UTC m=+45.050080703 I0831 07:22:22.502025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-31 07:22:22.502009374 +0000 UTC m=+45.079804793 I0831 07:22:22.544518 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:22:22.544504064 +0000 UTC m=+45.122299493 I0831 07:22:22.564613 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:22:22.565179 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:22:22.565172727 +0000 UTC m=+45.142968156 I0831 07:22:22.594743 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:28:01.897633 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-92.nip.io-tls" condition "Ready" to 2026-08-31 07:28:01.897581191 +0000 UTC m=+384.475376620 I0831 07:28:01.897657 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-92.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:28:01.897744 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-92.nip.io-tls" condition "Issuing" to 2026-08-31 07:28:01.897733034 +0000 UTC m=+384.475528463 I0831 07:28:01.913174 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-92.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-92.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:28:01.913390 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-92.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:28:01.913420 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-92.nip.io-tls" condition "Issuing" to 2026-08-31 07:28:01.913410689 +0000 UTC m=+384.491206108 I0831 07:28:02.125832 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-92.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-92.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:28:02.149502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-92.nip.io-tls-1" condition "Approved" to 2026-08-31 07:28:02.149489437 +0000 UTC m=+384.727284896 I0831 07:28:02.168242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-92.nip.io-tls-1" condition "Ready" to 2026-08-31 07:28:02.168231099 +0000 UTC m=+384.746026528 I0831 07:28:02.196943 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-92.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:28:02.196926489 +0000 UTC m=+384.774721918 I0831 07:28:02.215081 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-92.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-92.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:28:02.216054 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-92.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:28:02.216044959 +0000 UTC m=+384.793840398 I0831 07:28:02.229396 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-92.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-92.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:10.628469 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-31 07:29:10.628448532 +0000 UTC m=+453.206243961 I0831 07:29:10.628570 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:29:10.628619 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-31 07:29:10.628608506 +0000 UTC m=+453.206403955 E0831 07:29:10.643524 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0831 07:29:10.643610 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-31 07:29:10.643600251 +0000 UTC m=+453.221395700 E0831 07:29:10.643637 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0831 07:29:10.648275 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:10.648389 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:29:10.648465 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-31 07:29:10.648414795 +0000 UTC m=+453.226210254 E0831 07:29:10.656562 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0831 07:29:10.656945 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0831 07:29:10.657005 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0831 07:29:10.657042 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0831 07:29:10.683018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-31 07:29:10.683006726 +0000 UTC m=+453.260802145 I0831 07:29:10.692399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-31 07:29:10.69238026 +0000 UTC m=+453.270175679 I0831 07:29:10.713474 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:29:10.713460754 +0000 UTC m=+453.291256183 I0831 07:29:10.725581 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:10.725900 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:29:10.725892759 +0000 UTC m=+453.303688188 I0831 07:29:10.743627 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:15.657820 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:29:15.657807626 +0000 UTC m=+458.235603075 I0831 07:29:56.648441 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:29:56.648472 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-31 07:29:56.648465577 +0000 UTC m=+499.226260996 I0831 07:29:56.648819 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-31 07:29:56.648814704 +0000 UTC m=+499.226610123 I0831 07:29:56.649085 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-31 07:29:56.649080569 +0000 UTC m=+499.226875988 I0831 07:29:56.649123 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:29:56.649180 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-31 07:29:56.64917723 +0000 UTC m=+499.226972649 I0831 07:29:56.649310 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:29:56.649325 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-31 07:29:56.649322943 +0000 UTC m=+499.227118362 I0831 07:29:56.649569 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-31 07:29:56.649565067 +0000 UTC m=+499.227360486 I0831 07:29:56.676055 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:56.676156 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:29:56.676177 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-31 07:29:56.676171345 +0000 UTC m=+499.253966764 I0831 07:29:56.682453 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:56.682727 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:29:56.682751 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-31 07:29:56.682746178 +0000 UTC m=+499.260541597 I0831 07:29:56.683353 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:56.683395 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:29:56.683412 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-31 07:29:56.68340678 +0000 UTC m=+499.261202199 I0831 07:29:56.805265 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:56.813395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-31 07:29:56.813386439 +0000 UTC m=+499.391181858 I0831 07:29:56.837005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-31 07:29:56.83699374 +0000 UTC m=+499.414789159 I0831 07:29:56.850994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-31 07:29:56.850980061 +0000 UTC m=+499.428775480 I0831 07:29:56.862055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-31 07:29:56.862046638 +0000 UTC m=+499.439842047 I0831 07:29:56.868008 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:29:56.867995749 +0000 UTC m=+499.445791168 I0831 07:29:56.882649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:56.888597 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:29:56.888588464 +0000 UTC m=+499.466383883 I0831 07:29:56.900606 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:29:56.900594468 +0000 UTC m=+499.478389877 I0831 07:29:56.915515 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:56.966729 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:57.426179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-31 07:29:57.426167703 +0000 UTC m=+500.003963122 I0831 07:29:57.527658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-31 07:29:57.527646288 +0000 UTC m=+500.105441717 I0831 07:29:57.870005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:58.074945 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:29:58.074932705 +0000 UTC m=+500.652728134 I0831 07:29:58.166933 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:58.167798 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:29:58.167786407 +0000 UTC m=+500.745581856 I0831 07:29:58.421311 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:29:58.468508 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:30:05.301259 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:30:05.301307 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls" condition "Issuing" to 2026-08-31 07:30:05.301296062 +0000 UTC m=+507.879091511 I0831 07:30:05.301313 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls" condition "Ready" to 2026-08-31 07:30:05.301298182 +0000 UTC m=+507.879093631 I0831 07:30:05.315936 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:30:05.316058 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls" condition "Ready" to 2026-08-31 07:30:05.316048235 +0000 UTC m=+507.893843684 I0831 07:30:05.418194 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:30:05.448525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls-1" condition "Approved" to 2026-08-31 07:30:05.44851278 +0000 UTC m=+508.026308229 I0831 07:30:05.466939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls-1" condition "Ready" to 2026-08-31 07:30:05.466929711 +0000 UTC m=+508.044725130 I0831 07:30:05.493985 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:30:05.493975713 +0000 UTC m=+508.071771122 I0831 07:30:05.511939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dkjtd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:30:21.194349 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:30:21.194387 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-31 07:30:21.194376865 +0000 UTC m=+523.772172294 I0831 07:30:21.194762 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-31 07:30:21.194753743 +0000 UTC m=+523.772549192 I0831 07:30:21.208936 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:30:21.209007 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:30:21.209025 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-31 07:30:21.209020303 +0000 UTC m=+523.786815722 I0831 07:30:21.343604 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:30:21.348296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-31 07:30:21.34828368 +0000 UTC m=+523.926079099 I0831 07:30:21.386116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-31 07:30:21.386106932 +0000 UTC m=+523.963902351 I0831 07:30:21.409864 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:30:21.409853076 +0000 UTC m=+523.987648485 I0831 07:30:21.424039 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:30:21.424364 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:30:21.424358401 +0000 UTC m=+524.002153820 I0831 07:30:21.441643 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:33:45.585337 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-31 07:33:45.585316902 +0000 UTC m=+728.163112351 I0831 07:33:45.585822 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:33:45.585876 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-31 07:33:45.585863891 +0000 UTC m=+728.163659340 I0831 07:33:45.610260 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:33:45.610399 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-31 07:33:45.610387512 +0000 UTC m=+728.188182961 I0831 07:33:45.734248 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:33:45.767309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-31 07:33:45.767273403 +0000 UTC m=+728.345068832 I0831 07:33:45.784551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-31 07:33:45.784538047 +0000 UTC m=+728.362333496 I0831 07:33:45.821401 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:33:45.821390106 +0000 UTC m=+728.399185565 I0831 07:33:45.835317 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:34:29.930422 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 07:34:29.930465 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-31 07:34:29.930454994 +0000 UTC m=+772.508250443 I0831 07:34:29.930571 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-31 07:34:29.930481005 +0000 UTC m=+772.508276434 I0831 07:34:29.953213 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:34:29.953320 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-31 07:34:29.953309135 +0000 UTC m=+772.531104594 I0831 07:34:30.054798 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:34:30.082199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-31 07:34:30.082159625 +0000 UTC m=+772.659955054 I0831 07:34:30.096789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-31 07:34:30.096781185 +0000 UTC m=+772.674576604 I0831 07:34:30.120556 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:34:30.120547654 +0000 UTC m=+772.698343073 I0831 07:34:30.131263 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:34:30.132187 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 07:34:30.132180957 +0000 UTC m=+772.709976376 I0831 07:34:30.135990 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 07:34:30.146204 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"