I0805 19:23:22.779742 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0805 19:23:22.779974 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0805 19:23:22.783088 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0805 19:23:22.783119 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0805 19:23:22.783131 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0805 19:23:22.783832 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0805 19:23:22.783881 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0805 19:23:22.783955 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0805 19:23:22.788325 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0805 19:23:22.803901 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0805 19:23:22.809464 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0805 19:23:22.812976 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0805 19:23:22.813516 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0805 19:23:22.816563 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0805 19:23:22.821653 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0805 19:23:22.821676 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0805 19:23:22.821802 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0805 19:23:22.825003 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0805 19:23:22.827622 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0805 19:23:22.830643 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0805 19:23:22.833217 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0805 19:23:22.835160 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0805 19:23:22.840821 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0805 19:23:22.844616 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0805 19:23:22.846840 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0805 19:23:22.846941 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0805 19:23:22.849550 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0805 19:23:22.852146 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0805 19:23:22.856174 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0805 19:23:22.856189 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0805 19:23:22.856301 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0805 19:23:22.858124 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0805 19:23:22.863229 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0805 19:23:22.865680 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0805 19:23:22.869770 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.870273 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.870762 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.871194 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.871703 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.871860 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.889933 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.910929 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.918665 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.937312 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:22.952167 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 19:23:35.200405 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-05 19:23:35.200379899 +0000 UTC m=+12.445563548 I0805 19:23:35.908714 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:23:35.908768 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-05 19:23:35.908756382 +0000 UTC m=+13.153940051 I0805 19:23:35.908867 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-05 19:23:35.908850415 +0000 UTC m=+13.154034064 I0805 19:23:35.922357 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:23:35.922545 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" E0805 19:23:35.922602 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0805 19:23:35.922709 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-05 19:23:35.922698125 +0000 UTC m=+13.167881804 E0805 19:23:35.922736 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0805 19:23:35.922798 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-05 19:23:35.922658704 +0000 UTC m=+13.167842383 E0805 19:23:35.933209 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0805 19:23:35.933684 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0805 19:23:35.933807 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0805 19:23:35.933897 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0805 19:23:35.952666 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:23:35.964348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-05 19:23:35.96433697 +0000 UTC m=+13.209520599 I0805 19:23:35.991560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-05 19:23:35.991548487 +0000 UTC m=+13.236732116 I0805 19:23:36.013478 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:23:36.013460388 +0000 UTC m=+13.258644047 I0805 19:23:36.029929 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:23:36.030281 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:23:36.030273321 +0000 UTC m=+13.275456950 I0805 19:23:36.035734 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:23:36.040777 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:23:36.041527 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:23:36.041513646 +0000 UTC m=+13.286697295 I0805 19:23:40.933818 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:23:40.933805089 +0000 UTC m=+18.178988748 I0805 19:24:03.491610 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-05 19:24:03.491595352 +0000 UTC m=+40.736779001 I0805 19:24:03.491628 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:24:03.491730 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-05 19:24:03.491718096 +0000 UTC m=+40.736901715 I0805 19:24:03.500525 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-05 19:24:03.500508803 +0000 UTC m=+40.745692432 I0805 19:24:03.515277 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:24:03.517438 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:24:03.517506 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-05 19:24:03.517492095 +0000 UTC m=+40.762675724 I0805 19:24:03.891094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-05 19:24:03.891073066 +0000 UTC m=+41.136256735 I0805 19:24:03.918403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-05 19:24:03.918386828 +0000 UTC m=+41.163570457 I0805 19:24:03.950990 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:24:03.950979285 +0000 UTC m=+41.196162894 I0805 19:24:03.971688 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:28:09.921130 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-150.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:28:09.921222 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Issuing" to 2026-08-05 19:28:09.921210581 +0000 UTC m=+287.166394260 I0805 19:28:09.921697 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Ready" to 2026-08-05 19:28:09.921687258 +0000 UTC m=+287.166870937 I0805 19:28:09.940202 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-150.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-150.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:28:09.941482 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-150.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:28:09.941546 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Issuing" to 2026-08-05 19:28:09.941537562 +0000 UTC m=+287.186721181 I0805 19:28:10.107274 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-150.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-150.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:28:10.123103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-150.nip.io-tls-1" condition "Approved" to 2026-08-05 19:28:10.123077535 +0000 UTC m=+287.368261184 I0805 19:28:10.140206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-150.nip.io-tls-1" condition "Ready" to 2026-08-05 19:28:10.140192582 +0000 UTC m=+287.385376211 I0805 19:28:10.160152 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:28:10.160137571 +0000 UTC m=+287.405321210 I0805 19:28:10.176064 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-150.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-150.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:28:10.177169 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-150.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:28:10.177150766 +0000 UTC m=+287.422334425 I0805 19:28:10.185562 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-150.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-150.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:28:10.187912 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-150.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-150.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:15.071850 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:29:15.071949 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-05 19:29:15.071936667 +0000 UTC m=+352.317120316 I0805 19:29:15.072377 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-05 19:29:15.072351857 +0000 UTC m=+352.317535516 E0805 19:29:15.083958 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0805 19:29:15.084087 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-05 19:29:15.084075899 +0000 UTC m=+352.329259528 E0805 19:29:15.084153 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0805 19:29:15.086492 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:15.086647 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-05 19:29:15.086633501 +0000 UTC m=+352.331817160 E0805 19:29:15.093941 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0805 19:29:15.094175 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0805 19:29:15.094370 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0805 19:29:15.094519 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0805 19:29:15.100321 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:15.100396 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-05 19:29:15.100386011 +0000 UTC m=+352.345569640 I0805 19:29:15.111650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-05 19:29:15.111629602 +0000 UTC m=+352.356813231 I0805 19:29:15.115146 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-05 19:29:15.115133616 +0000 UTC m=+352.360317245 I0805 19:29:15.119992 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:15.123203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-05 19:29:15.12319073 +0000 UTC m=+352.368374359 I0805 19:29:15.140787 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:29:15.140768223 +0000 UTC m=+352.385951882 I0805 19:29:15.154355 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:15.186649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:20.095112 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:29:20.095091876 +0000 UTC m=+357.340275525 I0805 19:29:59.849237 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:29:59.849525 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-05 19:29:59.849509864 +0000 UTC m=+397.094693473 I0805 19:29:59.849639 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:29:59.850055 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-05 19:29:59.850020099 +0000 UTC m=+397.095203728 I0805 19:29:59.849539 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-05 19:29:59.849528514 +0000 UTC m=+397.094712143 I0805 19:29:59.849702 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:29:59.850452 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-05 19:29:59.85044694 +0000 UTC m=+397.095630569 I0805 19:29:59.849708 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-05 19:29:59.849704509 +0000 UTC m=+397.094888138 I0805 19:29:59.849755 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-05 19:29:59.84975106 +0000 UTC m=+397.094934689 I0805 19:29:59.936400 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:59.937139 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-05 19:29:59.93713195 +0000 UTC m=+397.182315569 I0805 19:29:59.951985 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:59.952045 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:29:59.952064 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-05 19:29:59.952058698 +0000 UTC m=+397.197242317 I0805 19:29:59.952241 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:29:59.952374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-05 19:29:59.952348406 +0000 UTC m=+397.197532025 I0805 19:30:00.134457 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:00.153607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-05 19:30:00.153598317 +0000 UTC m=+397.398781936 I0805 19:30:00.169653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-05 19:30:00.169648108 +0000 UTC m=+397.414831727 I0805 19:30:00.195348 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:00.19533908 +0000 UTC m=+397.440522699 I0805 19:30:00.220560 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:00.221702 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:00.2216952 +0000 UTC m=+397.466878829 I0805 19:30:00.252125 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:00.252371 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:00.340065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:00.374808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-05 19:30:00.374796853 +0000 UTC m=+397.619980482 I0805 19:30:00.389083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-05 19:30:00.389074304 +0000 UTC m=+397.634257923 I0805 19:30:00.419253 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:00.419242002 +0000 UTC m=+397.664425621 I0805 19:30:00.432506 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:00.724791 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:00.894245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-05 19:30:00.894229439 +0000 UTC m=+398.139413098 I0805 19:30:01.030594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-05 19:30:01.030583012 +0000 UTC m=+398.275766641 I0805 19:30:01.428101 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:01.428070312 +0000 UTC m=+398.673253931 I0805 19:30:01.524255 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:01.525543 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:01.525532568 +0000 UTC m=+398.770716217 I0805 19:30:01.772352 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:01.841042 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:06.605093 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:30:06.605127 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" condition "Issuing" to 2026-08-05 19:30:06.605118119 +0000 UTC m=+403.850301748 I0805 19:30:06.605315 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" condition "Ready" to 2026-08-05 19:30:06.605298254 +0000 UTC m=+403.850481883 I0805 19:30:06.618445 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:06.618530 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:30:06.618574 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" condition "Issuing" to 2026-08-05 19:30:06.618568903 +0000 UTC m=+403.863752532 I0805 19:30:07.148781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls-1" condition "Approved" to 2026-08-05 19:30:07.148768885 +0000 UTC m=+404.393952504 I0805 19:30:07.169003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls-1" condition "Ready" to 2026-08-05 19:30:07.168994883 +0000 UTC m=+404.414178502 I0805 19:30:07.194229 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:07.194211135 +0000 UTC m=+404.439394764 I0805 19:30:07.211860 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:07.214860 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:07.214851886 +0000 UTC m=+404.460035505 I0805 19:30:07.224019 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:07.229439 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8rkmx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:07.229426253 +0000 UTC m=+404.474609872 I0805 19:30:20.514865 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:30:20.514915 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-05 19:30:20.514908789 +0000 UTC m=+417.760092408 I0805 19:30:20.514914 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-05 19:30:20.514907289 +0000 UTC m=+417.760090898 I0805 19:30:20.529036 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:30:20.529145 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:30:20.529281 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-05 19:30:20.529274822 +0000 UTC m=+417.774458441 I0805 19:30:20.663761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-05 19:30:20.663742837 +0000 UTC m=+417.908926456 I0805 19:30:20.695197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-05 19:30:20.695187655 +0000 UTC m=+417.940371284 I0805 19:30:20.721348 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:30:20.721329686 +0000 UTC m=+417.966513295 I0805 19:30:20.742135 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:33:45.909019 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-05 19:33:45.909000584 +0000 UTC m=+623.154184233 I0805 19:33:45.909327 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:33:45.909422 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-05 19:33:45.909396978 +0000 UTC m=+623.154580627 I0805 19:33:45.923941 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:33:45.924151 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-05 19:33:45.924143559 +0000 UTC m=+623.169327188 I0805 19:33:46.223009 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:33:46.256851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-05 19:33:46.256835386 +0000 UTC m=+623.502019015 I0805 19:33:46.269168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-05 19:33:46.26915665 +0000 UTC m=+623.514340269 I0805 19:33:46.293614 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:33:46.293598691 +0000 UTC m=+623.538782320 I0805 19:33:46.315309 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:33:46.316321 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:33:46.31631109 +0000 UTC m=+623.561494719 I0805 19:33:46.338930 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:34:29.027289 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 19:34:29.027356 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-05 19:34:29.027346211 +0000 UTC m=+666.272529820 I0805 19:34:29.028859 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-05 19:34:29.028834775 +0000 UTC m=+666.274018434 I0805 19:34:29.040501 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:34:29.040583 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-05 19:34:29.040573204 +0000 UTC m=+666.285756813 I0805 19:34:29.400354 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:34:29.437939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-05 19:34:29.437926457 +0000 UTC m=+666.683110086 I0805 19:34:29.461520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-05 19:34:29.461505438 +0000 UTC m=+666.706689067 I0805 19:34:29.488401 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:34:29.488380679 +0000 UTC m=+666.733564338 I0805 19:34:29.497012 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:34:29.497388 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 19:34:29.497381847 +0000 UTC m=+666.742565456 I0805 19:34:29.504540 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 19:34:29.511715 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"