I0901 03:49:24.598454 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0901 03:49:24.598612 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0901 03:49:24.601564 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0901 03:49:24.601602 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0901 03:49:24.601610 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0901 03:49:24.601959 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0901 03:49:24.602376 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0901 03:49:24.602509 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0901 03:49:24.609086 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0901 03:49:24.622681 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0901 03:49:24.623274 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0901 03:49:24.627853 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0901 03:49:24.631195 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0901 03:49:24.633612 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0901 03:49:24.637922 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0901 03:49:24.637959 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0901 03:49:24.637975 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0901 03:49:24.638062 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0901 03:49:24.642644 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0901 03:49:24.647090 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0901 03:49:24.651197 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0901 03:49:24.654204 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0901 03:49:24.657047 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0901 03:49:24.661880 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0901 03:49:24.662004 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0901 03:49:24.665877 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0901 03:49:24.668591 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0901 03:49:24.671243 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0901 03:49:24.673809 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0901 03:49:24.676512 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0901 03:49:24.679880 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0901 03:49:24.682293 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0901 03:49:24.687648 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0901 03:49:24.687708 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0901 03:49:24.690648 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.691979 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.692063 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.692221 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.692287 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.714709 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.744024 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.782823 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.803931 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.819425 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:24.829997 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0901 03:49:45.369334 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-01 03:49:45.369112334 +0000 UTC m=+20.802296099 I0901 03:49:46.252295 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 03:49:46.252278611 +0000 UTC m=+21.685462346 I0901 03:49:46.253105 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:49:46.253199 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-01 03:49:46.253158658 +0000 UTC m=+21.686342423 E0901 03:49:46.348458 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 03:49:46.348572 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-01 03:49:46.348556991 +0000 UTC m=+21.781740756 E0901 03:49:46.348857 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 03:49:46.349297 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:49:46.349467 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 03:49:46.349449617 +0000 UTC m=+21.782633452 E0901 03:49:46.419776 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0901 03:49:46.419915 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 03:49:46.419952 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 03:49:46.419991 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0901 03:49:46.448160 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:49:46.511728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-01 03:49:46.511710285 +0000 UTC m=+21.944894040 I0901 03:49:46.562327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-01 03:49:46.562286584 +0000 UTC m=+21.995470309 I0901 03:49:46.593654 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:49:46.593635543 +0000 UTC m=+22.026819278 I0901 03:49:46.682140 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:49:46.682881 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:49:46.682866415 +0000 UTC m=+22.116050170 I0901 03:49:46.687786 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:49:46.710548 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:49:51.420291 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:49:51.420274414 +0000 UTC m=+26.853458169 I0901 03:50:17.873416 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:50:17.873508 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-01 03:50:17.87349749 +0000 UTC m=+53.306681225 I0901 03:50:17.874082 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-01 03:50:17.874057219 +0000 UTC m=+53.307240974 I0901 03:50:17.895296 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:50:17.895600 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:50:17.895693 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-01 03:50:17.895682036 +0000 UTC m=+53.328865771 I0901 03:50:17.895694 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-01 03:50:17.895683146 +0000 UTC m=+53.328866881 I0901 03:50:18.073260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-01 03:50:18.073238178 +0000 UTC m=+53.506421923 I0901 03:50:18.107728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-01 03:50:18.10771329 +0000 UTC m=+53.540897015 I0901 03:50:18.144115 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:50:18.144100945 +0000 UTC m=+53.577284690 I0901 03:50:18.170516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:50:18.173446 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:50:18.17343013 +0000 UTC m=+53.606613875 I0901 03:50:18.202008 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:50:18.202609 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:55:41.312972 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-170.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:55:41.312988 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready" to 2026-09-01 03:55:41.312237918 +0000 UTC m=+376.745421693 I0901 03:55:41.313063 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Issuing" to 2026-09-01 03:55:41.313053957 +0000 UTC m=+376.746237732 I0901 03:55:41.334220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:55:41.334362 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-170.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:55:41.334418 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Issuing" to 2026-09-01 03:55:41.334410682 +0000 UTC m=+376.767594407 I0901 03:55:41.468065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:55:41.497194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-170.nip.io-tls-1" condition "Approved" to 2026-09-01 03:55:41.49717973 +0000 UTC m=+376.930363485 I0901 03:55:41.523771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-170.nip.io-tls-1" condition "Ready" to 2026-09-01 03:55:41.523759904 +0000 UTC m=+376.956943639 I0901 03:55:41.593059 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:55:41.593041128 +0000 UTC m=+377.026224863 I0901 03:55:41.612002 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:55:41.614742 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:55:41.61472954 +0000 UTC m=+377.047913305 I0901 03:55:41.634076 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:55:41.634076 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-170.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-170.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:55:41.635058 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-170.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:55:41.635044032 +0000 UTC m=+377.068227797 I0901 03:56:50.199326 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:56:50.199568 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-01 03:56:50.199552486 +0000 UTC m=+445.632736251 I0901 03:56:50.199690 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-01 03:56:50.199676369 +0000 UTC m=+445.632860084 E0901 03:56:50.218057 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 03:56:50.218127 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-01 03:56:50.218117707 +0000 UTC m=+445.651301442 E0901 03:56:50.218148 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 03:56:50.220448 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:56:50.220679 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:56:50.220775 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-01 03:56:50.220724292 +0000 UTC m=+445.653908047 E0901 03:56:50.231095 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0901 03:56:50.233873 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 03:56:50.233969 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 03:56:50.234017 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0901 03:56:50.259226 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:56:50.270954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-01 03:56:50.270942109 +0000 UTC m=+445.704125824 I0901 03:56:50.285938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-01 03:56:50.285925794 +0000 UTC m=+445.719109519 I0901 03:56:50.312627 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:56:50.312610475 +0000 UTC m=+445.745794230 I0901 03:56:50.329368 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:56:50.329930 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:56:50.32991974 +0000 UTC m=+445.763103485 I0901 03:56:50.334614 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:56:50.344812 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:56:50.345212 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:56:50.345204792 +0000 UTC m=+445.778388527 I0901 03:56:55.231964 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:56:55.231949622 +0000 UTC m=+450.665133377 I0901 03:57:36.825757 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-01 03:57:36.825736808 +0000 UTC m=+492.258920553 I0901 03:57:36.826187 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:57:36.826262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-01 03:57:36.826251228 +0000 UTC m=+492.259434953 I0901 03:57:36.845819 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-01 03:57:36.845796426 +0000 UTC m=+492.278980151 I0901 03:57:36.847146 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:57:36.847852 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:57:36.847169 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-01 03:57:36.847165134 +0000 UTC m=+492.280348859 I0901 03:57:36.847901 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-01 03:57:36.847888219 +0000 UTC m=+492.281071954 I0901 03:57:36.855749 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-01 03:57:36.855728928 +0000 UTC m=+492.288912663 I0901 03:57:36.881411 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:36.881521 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:57:36.881557 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-01 03:57:36.881547854 +0000 UTC m=+492.314731569 I0901 03:57:36.926905 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:36.927489 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-01 03:57:36.927474977 +0000 UTC m=+492.360658732 I0901 03:57:36.928193 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:36.935053 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:57:36.935085 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-01 03:57:36.935077232 +0000 UTC m=+492.368260957 I0901 03:57:37.097804 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:37.124216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-01 03:57:37.124193368 +0000 UTC m=+492.557377093 I0901 03:57:37.138014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-01 03:57:37.138002059 +0000 UTC m=+492.571185784 I0901 03:57:37.166490 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:57:37.166471717 +0000 UTC m=+492.599655442 I0901 03:57:37.188194 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:37.255580 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:37.272053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-01 03:57:37.272034104 +0000 UTC m=+492.705217829 I0901 03:57:37.288256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-01 03:57:37.288226503 +0000 UTC m=+492.721410228 I0901 03:57:37.308080 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:57:37.308069136 +0000 UTC m=+492.741252861 I0901 03:57:37.328372 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:37.328820 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:57:37.328813758 +0000 UTC m=+492.761997483 I0901 03:57:37.610696 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:37.665674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-01 03:57:37.665640487 +0000 UTC m=+493.098824212 I0901 03:57:38.023466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-01 03:57:38.023449551 +0000 UTC m=+493.456633306 I0901 03:57:38.278602 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:57:38.278585465 +0000 UTC m=+493.711769200 I0901 03:57:38.384119 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:38.384669 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:57:38.38466335 +0000 UTC m=+493.817847075 I0901 03:57:38.560335 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:46.142458 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" condition "Ready" to 2026-09-01 03:57:46.142446002 +0000 UTC m=+501.575629737 I0901 03:57:46.142459 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:57:46.142569 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" condition "Issuing" to 2026-09-01 03:57:46.142563435 +0000 UTC m=+501.575747180 I0901 03:57:46.165814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hzws8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:46.166112 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" condition "Ready" to 2026-09-01 03:57:46.166100471 +0000 UTC m=+501.599284196 I0901 03:57:46.434893 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hzws8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:46.465639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hzws8-tls-1" condition "Approved" to 2026-09-01 03:57:46.465626748 +0000 UTC m=+501.898810473 I0901 03:57:46.481263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hzws8-tls-1" condition "Ready" to 2026-09-01 03:57:46.481251654 +0000 UTC m=+501.914435379 I0901 03:57:46.515495 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:57:46.515482596 +0000 UTC m=+501.948666321 I0901 03:57:46.533937 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hzws8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:57:46.534513 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:57:46.53450525 +0000 UTC m=+501.967688975 I0901 03:57:46.558934 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hzws8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hzws8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:58:00.338736 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:58:00.338797 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-01 03:58:00.3387909 +0000 UTC m=+515.771974625 I0901 03:58:00.339136 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-01 03:58:00.338882082 +0000 UTC m=+515.772065807 I0901 03:58:00.358966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 03:58:00.369414 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 03:58:00.369507 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-01 03:58:00.369499786 +0000 UTC m=+515.802683501 I0901 03:58:00.587644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-01 03:58:00.587628583 +0000 UTC m=+516.020812308 I0901 03:58:00.610631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-01 03:58:00.610621684 +0000 UTC m=+516.043805409 I0901 03:58:00.636086 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 03:58:00.636076346 +0000 UTC m=+516.069260071 I0901 03:58:00.651635 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:01:29.874512 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-01 04:01:29.874494584 +0000 UTC m=+725.307678339 I0901 04:01:29.874938 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:01:29.874957 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-01 04:01:29.874953521 +0000 UTC m=+725.308137256 I0901 04:01:29.891261 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:01:29.891344 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:01:29.891373 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-01 04:01:29.891365065 +0000 UTC m=+725.324548810 I0901 04:01:30.366050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-01 04:01:30.366037276 +0000 UTC m=+725.799221001 I0901 04:01:30.384542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-01 04:01:30.384532775 +0000 UTC m=+725.817716510 I0901 04:01:30.406705 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:01:30.406696916 +0000 UTC m=+725.839880641 I0901 04:01:30.419726 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:01:30.420121 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:01:30.420113902 +0000 UTC m=+725.853297627 I0901 04:01:30.436021 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:02:14.073581 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:02:14.073675 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-01 04:02:14.073651919 +0000 UTC m=+769.506835714 I0901 04:02:14.074177 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-01 04:02:14.074168607 +0000 UTC m=+769.507352332 I0901 04:02:14.085536 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:02:14.086398 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:02:14.086447 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-01 04:02:14.086437501 +0000 UTC m=+769.519621266 I0901 04:02:14.318163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-01 04:02:14.31815239 +0000 UTC m=+769.751336115 I0901 04:02:14.336603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-01 04:02:14.336595663 +0000 UTC m=+769.769779388 I0901 04:02:14.366540 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:02:14.366527585 +0000 UTC m=+769.799711320 I0901 04:02:14.382572 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:02:14.383090 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:02:14.383083785 +0000 UTC m=+769.816267510 I0901 04:02:14.386140 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:02:14.395696 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"