I0812 04:48:59.011625 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0812 04:48:59.011830 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 04:48:59.016718 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0812 04:48:59.016783 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0812 04:48:59.016805 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0812 04:48:59.017363 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0812 04:48:59.017484 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0812 04:48:59.017387 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0812 04:48:59.020697 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 04:48:59.033799 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0812 04:48:59.033983 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0812 04:48:59.034004 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0812 04:48:59.034010 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0812 04:48:59.041341 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0812 04:48:59.043856 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0812 04:48:59.045605 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0812 04:48:59.047526 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0812 04:48:59.052242 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0812 04:48:59.055567 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0812 04:48:59.058093 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0812 04:48:59.060601 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0812 04:48:59.060663 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0812 04:48:59.064864 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0812 04:48:59.064909 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0812 04:48:59.069136 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0812 04:48:59.072368 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0812 04:48:59.078556 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0812 04:48:59.080697 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0812 04:48:59.082884 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0812 04:48:59.083010 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0812 04:48:59.085277 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0812 04:48:59.087689 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0812 04:48:59.090221 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0812 04:48:59.094096 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0812 04:48:59.096903 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.097975 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.098033 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.098499 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.098567 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.117096 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.135250 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.151896 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.167271 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.189261 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:48:59.205808 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 04:49:12.125611 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-12 04:49:12.125587421 +0000 UTC m=+13.139708136 I0812 04:49:12.841831 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:49:12.841876 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 04:49:12.841865033 +0000 UTC m=+13.855985748 I0812 04:49:12.841987 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-12 04:49:12.841968524 +0000 UTC m=+13.856089239 E0812 04:49:12.857371 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 04:49:12.857459 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-12 04:49:12.857430908 +0000 UTC m=+13.871551593 E0812 04:49:12.857621 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 04:49:12.858146 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:49:12.858351 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:49:12.858387 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 04:49:12.858379043 +0000 UTC m=+13.872499758 E0812 04:49:12.871305 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0812 04:49:12.871374 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 04:49:12.871395 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 04:49:12.871880 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0812 04:49:12.895929 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:49:12.913277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-12 04:49:12.913268112 +0000 UTC m=+13.927388797 I0812 04:49:12.936927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-12 04:49:12.936916181 +0000 UTC m=+13.951036866 I0812 04:49:12.961575 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:49:12.961559092 +0000 UTC m=+13.975679807 I0812 04:49:12.973397 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:49:12.973971 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:49:12.973960861 +0000 UTC m=+13.988081576 I0812 04:49:12.987990 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:49:17.872890 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:49:17.872871513 +0000 UTC m=+18.886992228 I0812 04:49:47.983203 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-12 04:49:47.983170909 +0000 UTC m=+48.997291604 I0812 04:49:47.983489 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:49:47.983582 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 04:49:47.983571174 +0000 UTC m=+48.997691889 I0812 04:49:47.993199 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-12 04:49:47.99318955 +0000 UTC m=+49.007310235 I0812 04:49:47.996113 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:49:47.997634 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:49:47.997743 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 04:49:47.997731588 +0000 UTC m=+49.011852303 I0812 04:49:48.153637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-12 04:49:48.153622414 +0000 UTC m=+49.167743099 I0812 04:49:48.186765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-12 04:49:48.186572792 +0000 UTC m=+49.200693477 I0812 04:49:48.216542 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:49:48.21653149 +0000 UTC m=+49.230652175 I0812 04:49:48.229745 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:49:48.230298 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:49:48.230291219 +0000 UTC m=+49.244411904 I0812 04:49:48.243521 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:49:48.247866 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:54:39.486714 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-65.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:54:39.486794 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Issuing" to 2026-08-12 04:54:39.486770313 +0000 UTC m=+340.500891018 I0812 04:54:39.488062 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-08-12 04:54:39.488050177 +0000 UTC m=+340.502170872 I0812 04:54:39.512865 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:54:39.513317 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-08-12 04:54:39.51330487 +0000 UTC m=+340.527425555 I0812 04:54:39.953101 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:54:39.990344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-1" condition "Approved" to 2026-08-12 04:54:39.990331008 +0000 UTC m=+341.004451693 I0812 04:54:40.007340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-1" condition "Ready" to 2026-08-12 04:54:40.007327514 +0000 UTC m=+341.021448179 I0812 04:54:40.048520 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:54:40.0485047 +0000 UTC m=+341.062625405 I0812 04:54:40.066018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:54:40.066606 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:54:40.066594936 +0000 UTC m=+341.080715621 I0812 04:54:40.094964 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:55:44.632585 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-12 04:55:44.63254279 +0000 UTC m=+405.646663495 I0812 04:55:44.632611 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:55:44.632759 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 04:55:44.632750674 +0000 UTC m=+405.646871349 E0812 04:55:44.657387 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 04:55:44.657478 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-12 04:55:44.65746666 +0000 UTC m=+405.671587375 E0812 04:55:44.657508 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 04:55:44.658701 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:55:44.658810 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-12 04:55:44.658799452 +0000 UTC m=+405.672920157 E0812 04:55:44.671955 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0812 04:55:44.672502 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0812 04:55:44.672522 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 04:55:44.672562 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 04:55:44.672594 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0812 04:55:44.672693 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-12 04:55:44.672686916 +0000 UTC m=+405.686807601 I0812 04:55:44.677230 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:55:44.694041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-12 04:55:44.694023796 +0000 UTC m=+405.708144501 E0812 04:55:44.705812 1 controller.go:162] "re-queuing item due to error processing" err="certificaterequests.cert-manager.io \"kube-prometheus-stack-ca-1\" already exists" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" I0812 04:55:44.707225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-12 04:55:44.707216998 +0000 UTC m=+405.721337673 I0812 04:55:44.724806 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:55:44.724795554 +0000 UTC m=+405.738916239 I0812 04:55:44.738118 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:55:44.738504 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:55:44.738495575 +0000 UTC m=+405.752616280 I0812 04:55:44.755860 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:55:49.672423 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:55:49.672412093 +0000 UTC m=+410.686532778 I0812 04:56:33.026421 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 04:56:33.026387492 +0000 UTC m=+454.040508207 I0812 04:56:33.027059 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:56:33.027109 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-12 04:56:33.027101453 +0000 UTC m=+454.041222128 I0812 04:56:33.031916 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 04:56:33.031907509 +0000 UTC m=+454.046028194 I0812 04:56:33.032102 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:56:33.032151 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-12 04:56:33.032146083 +0000 UTC m=+454.046266778 I0812 04:56:33.052168 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 04:56:33.052154848 +0000 UTC m=+454.066275523 I0812 04:56:33.052304 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:56:33.052367 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 04:56:33.052357881 +0000 UTC m=+454.066478566 I0812 04:56:33.068758 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:33.068853 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 04:56:33.068844531 +0000 UTC m=+454.082965216 I0812 04:56:33.071483 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:33.072341 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:56:33.072407 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-12 04:56:33.072366716 +0000 UTC m=+454.086487421 I0812 04:56:33.082045 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:33.082134 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:56:33.082165 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 04:56:33.0821575 +0000 UTC m=+454.096278185 I0812 04:56:33.217529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-12 04:56:33.217517092 +0000 UTC m=+454.231637777 I0812 04:56:33.232086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-12 04:56:33.232075411 +0000 UTC m=+454.246196086 I0812 04:56:33.256733 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:56:33.256721999 +0000 UTC m=+454.270842684 I0812 04:56:33.280047 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:33.338653 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:33.348566 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:33.434568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-12 04:56:33.43455741 +0000 UTC m=+454.448678085 I0812 04:56:33.451894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-12 04:56:33.451884282 +0000 UTC m=+454.466004967 I0812 04:56:33.473103 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:56:33.473093006 +0000 UTC m=+454.487213701 I0812 04:56:33.565646 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:33.566109 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:56:33.566103371 +0000 UTC m=+454.580224046 I0812 04:56:33.918915 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:34.101285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-12 04:56:34.101271556 +0000 UTC m=+455.115392261 I0812 04:56:34.244182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-12 04:56:34.244171743 +0000 UTC m=+455.258292428 I0812 04:56:34.771614 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.controller" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-1" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-2nc57" resource_namespace="monitoring" resource_kind="" resource_version="" I0812 04:56:34.825904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-12 04:56:34.825893271 +0000 UTC m=+455.840013956 I0812 04:56:34.876491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-12 04:56:34.876479947 +0000 UTC m=+455.890600632 E0812 04:56:35.316931 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-2nc57\" already exists" logger="cert-manager.controller" key="monitoring/alertmanager-tls" I0812 04:56:35.420271 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:56:35.420261992 +0000 UTC m=+456.434382677 I0812 04:56:35.514412 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:35.817077 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:42.852266 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nd69l-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:56:42.852322 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nd69l-tls" condition "Issuing" to 2026-08-12 04:56:42.852316277 +0000 UTC m=+463.866436962 I0812 04:56:42.852525 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nd69l-tls" condition "Ready" to 2026-08-12 04:56:42.852504781 +0000 UTC m=+463.866625486 I0812 04:56:42.865193 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nd69l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nd69l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:42.865287 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nd69l-tls" condition "Ready" to 2026-08-12 04:56:42.86528171 +0000 UTC m=+463.879402395 I0812 04:56:43.056984 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nd69l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nd69l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:56:43.088219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nd69l-tls-1" condition "Approved" to 2026-08-12 04:56:43.088205173 +0000 UTC m=+464.102325848 I0812 04:56:43.102709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nd69l-tls-1" condition "Ready" to 2026-08-12 04:56:43.102698539 +0000 UTC m=+464.116819224 I0812 04:56:43.135804 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nd69l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:56:43.135790844 +0000 UTC m=+464.149911529 I0812 04:56:43.152277 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nd69l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nd69l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:57:04.371528 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 04:57:04.371444682 +0000 UTC m=+485.385565387 I0812 04:57:04.371875 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 04:57:04.371955 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 04:57:04.3719451 +0000 UTC m=+485.386065815 I0812 04:57:04.398851 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:57:04.398991 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 04:57:04.398978162 +0000 UTC m=+485.413098877 I0812 04:57:04.551111 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 04:57:04.763139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-12 04:57:04.763109281 +0000 UTC m=+485.777229986 I0812 04:57:04.897611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-12 04:57:04.897598661 +0000 UTC m=+485.911719346 I0812 04:57:05.052782 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 04:57:05.052761674 +0000 UTC m=+486.066882379 I0812 04:57:05.578779 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 05:00:28.528356 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 05:00:28.528437 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 05:00:28.528426274 +0000 UTC m=+689.542546979 I0812 05:00:28.529237 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 05:00:28.529227891 +0000 UTC m=+689.543348606 I0812 05:00:28.547455 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 05:00:28.547603 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 05:00:28.547565009 +0000 UTC m=+689.561685714 I0812 05:00:28.760337 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 05:00:28.798351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-12 05:00:28.79833779 +0000 UTC m=+689.812458475 I0812 05:00:28.814548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-12 05:00:28.814537786 +0000 UTC m=+689.828658471 I0812 05:00:28.837836 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 05:00:28.837826279 +0000 UTC m=+689.851946974 I0812 05:00:28.854260 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 05:00:28.854692 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 05:00:28.854685348 +0000 UTC m=+689.868806043 I0812 05:00:28.895861 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 05:01:12.743099 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 05:01:12.743149 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-12 05:01:12.743141964 +0000 UTC m=+733.757262649 I0812 05:01:12.743252 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-12 05:01:12.743244007 +0000 UTC m=+733.757364692 I0812 05:01:12.768736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 05:01:12.769099 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-12 05:01:12.769084344 +0000 UTC m=+733.783205049 I0812 05:01:12.979424 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 05:01:13.011505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-12 05:01:13.011494473 +0000 UTC m=+734.025615158 I0812 05:01:13.037241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-12 05:01:13.037232275 +0000 UTC m=+734.051352950 I0812 05:01:13.064415 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 05:01:13.064402382 +0000 UTC m=+734.078523087 I0812 05:01:13.079910 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 05:01:13.118365 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"