I0813 08:51:44.073605 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0813 08:51:44.074004 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0813 08:51:44.080299 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0813 08:51:44.080365 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0813 08:51:44.080392 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0813 08:51:44.081199 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0813 08:51:44.081221 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0813 08:51:44.081429 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0813 08:51:44.089256 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0813 08:51:44.105182 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0813 08:51:44.105910 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0813 08:51:44.112097 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0813 08:51:44.114933 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0813 08:51:44.118781 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0813 08:51:44.123187 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0813 08:51:44.125507 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0813 08:51:44.125654 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0813 08:51:44.127947 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0813 08:51:44.130192 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0813 08:51:44.132284 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0813 08:51:44.136789 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0813 08:51:44.141383 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0813 08:51:44.141485 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0813 08:51:44.144922 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0813 08:51:44.147610 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0813 08:51:44.150163 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0813 08:51:44.152631 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0813 08:51:44.155053 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0813 08:51:44.155079 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0813 08:51:44.155089 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0813 08:51:44.155194 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0813 08:51:44.157521 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0813 08:51:44.162239 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0813 08:51:44.164784 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0813 08:51:44.166813 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.168156 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.168457 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.168548 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.168205 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.184648 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.201825 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.221903 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.247152 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.265862 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:44.285776 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0813 08:51:56.705668 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-13 08:51:56.705638281 +0000 UTC m=+12.666067396 I0813 08:51:57.465629 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:51:57.465680 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-13 08:51:57.465668736 +0000 UTC m=+13.426097851 I0813 08:51:57.466105 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-13 08:51:57.466079726 +0000 UTC m=+13.426508841 E0813 08:51:57.479311 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0813 08:51:57.479402 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-13 08:51:57.479385482 +0000 UTC m=+13.439814577 E0813 08:51:57.479595 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0813 08:51:57.480908 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:51:57.480998 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-13 08:51:57.48098934 +0000 UTC m=+13.441418435 E0813 08:51:57.491390 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0813 08:51:57.491693 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0813 08:51:57.491724 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0813 08:51:57.491807 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0813 08:51:57.499664 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:51:57.534226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-13 08:51:57.534208873 +0000 UTC m=+13.494637968 I0813 08:51:57.559043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-13 08:51:57.559021833 +0000 UTC m=+13.519450958 I0813 08:51:57.580504 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:51:57.580492872 +0000 UTC m=+13.540921967 I0813 08:51:57.594894 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:51:57.597555 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:51:57.597538136 +0000 UTC m=+13.557967231 I0813 08:51:57.612752 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:51:57.623912 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:52:02.492008 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:52:02.491987871 +0000 UTC m=+18.452416986 I0813 08:52:25.052656 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:52:25.052768 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-13 08:52:25.052752794 +0000 UTC m=+41.013181889 I0813 08:52:25.053013 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-13 08:52:25.052717533 +0000 UTC m=+41.013146618 I0813 08:52:25.069878 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:52:25.070323 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-13 08:52:25.070314777 +0000 UTC m=+41.030743852 I0813 08:52:25.070822 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:52:25.070856 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-13 08:52:25.070853109 +0000 UTC m=+41.031282194 I0813 08:52:25.229187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-13 08:52:25.229171478 +0000 UTC m=+41.189600563 I0813 08:52:25.256964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-13 08:52:25.256949137 +0000 UTC m=+41.217378232 I0813 08:52:25.285017 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:52:25.284996812 +0000 UTC m=+41.245425907 I0813 08:52:25.301133 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:52:25.302370 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:52:25.302360419 +0000 UTC m=+41.262789514 I0813 08:52:25.315049 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:57:23.136311 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:57:23.136417 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Issuing" to 2026-08-13 08:57:23.136402411 +0000 UTC m=+339.096831526 I0813 08:57:23.136360 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready" to 2026-08-13 08:57:23.136313127 +0000 UTC m=+339.096742242 I0813 08:57:23.152723 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:57:23.152899 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready" to 2026-08-13 08:57:23.152883751 +0000 UTC m=+339.113312846 I0813 08:57:23.627032 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:57:23.661118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-121.nip.io-tls-1" condition "Approved" to 2026-08-13 08:57:23.661100791 +0000 UTC m=+339.621529886 I0813 08:57:23.678321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-121.nip.io-tls-1" condition "Ready" to 2026-08-13 08:57:23.678306101 +0000 UTC m=+339.638735186 I0813 08:57:23.700409 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:57:23.700394445 +0000 UTC m=+339.660823540 I0813 08:57:23.714760 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:57:23.755939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:58:28.246216 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:58:28.246380 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-13 08:58:28.24636781 +0000 UTC m=+404.206796905 I0813 08:58:28.246478 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-13 08:58:28.246455092 +0000 UTC m=+404.206884217 E0813 08:58:28.260655 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0813 08:58:28.260727 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-13 08:58:28.260718443 +0000 UTC m=+404.221147548 E0813 08:58:28.260746 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0813 08:58:28.261612 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:58:28.261733 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-13 08:58:28.261727069 +0000 UTC m=+404.222156164 E0813 08:58:28.271697 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0813 08:58:28.271792 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0813 08:58:28.271832 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0813 08:58:28.271877 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0813 08:58:28.276251 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:58:28.276344 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-13 08:58:28.276336628 +0000 UTC m=+404.236765713 I0813 08:58:28.283688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-13 08:58:28.283682694 +0000 UTC m=+404.244111779 I0813 08:58:28.288058 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-13 08:58:28.288049334 +0000 UTC m=+404.248478419 I0813 08:58:28.293280 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:58:28.297239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-13 08:58:28.297232597 +0000 UTC m=+404.257661682 I0813 08:58:28.313442 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:58:28.313435228 +0000 UTC m=+404.273864303 I0813 08:58:28.324487 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:58:28.324744 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:58:28.324736154 +0000 UTC m=+404.285165249 I0813 08:58:28.336095 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:58:33.272146 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:58:33.27211401 +0000 UTC m=+409.232543125 I0813 08:59:17.081885 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-13 08:59:17.081849565 +0000 UTC m=+453.042278650 I0813 08:59:17.085836 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:59:17.086514 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-13 08:59:17.086504311 +0000 UTC m=+453.046933416 I0813 08:59:17.088037 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-13 08:59:17.08801835 +0000 UTC m=+453.048447435 I0813 08:59:17.088930 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:59:17.089009 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-13 08:59:17.088997315 +0000 UTC m=+453.049426400 I0813 08:59:17.090275 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-13 08:59:17.089252681 +0000 UTC m=+453.049681776 I0813 08:59:17.088760 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:59:17.097550 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-13 08:59:17.097541829 +0000 UTC m=+453.057970924 I0813 08:59:17.110712 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:17.116538 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:59:17.116597 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-13 08:59:17.116568569 +0000 UTC m=+453.076997654 I0813 08:59:17.116658 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:17.118339 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-13 08:59:17.118320523 +0000 UTC m=+453.078749608 I0813 08:59:17.136826 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:17.136986 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:59:17.137042 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-13 08:59:17.137030734 +0000 UTC m=+453.097459809 I0813 08:59:17.327839 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:17.337830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-13 08:59:17.337813113 +0000 UTC m=+453.298242198 I0813 08:59:17.353317 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:17.361739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-13 08:59:17.361723425 +0000 UTC m=+453.322152510 I0813 08:59:17.386952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-13 08:59:17.386930401 +0000 UTC m=+453.347359476 I0813 08:59:17.391907 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:17.391868825 +0000 UTC m=+453.352297910 I0813 08:59:17.402836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-13 08:59:17.402827371 +0000 UTC m=+453.363256466 I0813 08:59:17.411311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-13 08:59:17.411291754 +0000 UTC m=+453.371720849 I0813 08:59:17.413586 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:17.424206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-13 08:59:17.424193549 +0000 UTC m=+453.384622654 I0813 08:59:17.764867 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:17.764845212 +0000 UTC m=+453.725274307 I0813 08:59:18.061578 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:18.062353 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:18.062341697 +0000 UTC m=+454.022770822 I0813 08:59:18.113316 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:18.11330753 +0000 UTC m=+454.073736645 I0813 08:59:18.387173 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:18.387155109 +0000 UTC m=+454.347584224 I0813 08:59:18.472898 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:18.473455 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:18.473446573 +0000 UTC m=+454.433875648 I0813 08:59:18.618130 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:18.670154 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:18.713452 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:18.960302 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:25.425234 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54lbr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:59:25.425282 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-54lbr-tls" condition "Issuing" to 2026-08-13 08:59:25.425270144 +0000 UTC m=+461.385699239 I0813 08:59:25.426081 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-54lbr-tls" condition "Ready" to 2026-08-13 08:59:25.426073575 +0000 UTC m=+461.386502670 I0813 08:59:25.438671 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54lbr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-54lbr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:25.439029 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-54lbr-tls" condition "Ready" to 2026-08-13 08:59:25.438761544 +0000 UTC m=+461.399190659 I0813 08:59:25.505821 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54lbr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-54lbr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:25.534497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-54lbr-tls-1" condition "Approved" to 2026-08-13 08:59:25.534479045 +0000 UTC m=+461.494908130 I0813 08:59:25.551246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-54lbr-tls-1" condition "Ready" to 2026-08-13 08:59:25.551230636 +0000 UTC m=+461.511659721 I0813 08:59:25.581510 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-54lbr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:25.581495119 +0000 UTC m=+461.541924204 I0813 08:59:25.652741 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54lbr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-54lbr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:37.792495 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-13 08:59:37.792479505 +0000 UTC m=+473.752908580 I0813 08:59:37.792564 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 08:59:37.792608 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-13 08:59:37.792595258 +0000 UTC m=+473.753024353 I0813 08:59:37.806956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:37.807073 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-13 08:59:37.807063371 +0000 UTC m=+473.767492466 I0813 08:59:38.040216 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:38.080232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-13 08:59:38.080216733 +0000 UTC m=+474.040645828 I0813 08:59:38.104193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-13 08:59:38.104180626 +0000 UTC m=+474.064609721 I0813 08:59:38.137620 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:38.137610807 +0000 UTC m=+474.098039902 I0813 08:59:38.150710 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:38.152603 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 08:59:38.152592194 +0000 UTC m=+474.113021289 I0813 08:59:38.163371 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 08:59:38.168919 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0813 09:02:53.012473 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-13 09:02:53.012455849 +0000 UTC m=+668.972884934 I0813 09:02:53.012858 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 09:02:53.012954 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-13 09:02:53.012921611 +0000 UTC m=+668.973350706 I0813 09:02:53.024218 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 09:02:53.024289 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 09:02:53.024306 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-13 09:02:53.024301416 +0000 UTC m=+668.984730501 I0813 09:02:53.165292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-13 09:02:53.165268897 +0000 UTC m=+669.125698012 I0813 09:02:53.178944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-13 09:02:53.178913769 +0000 UTC m=+669.139342864 I0813 09:02:53.213701 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 09:02:53.213690678 +0000 UTC m=+669.174119763 I0813 09:02:53.231057 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 09:02:53.232784 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 09:02:53.232776135 +0000 UTC m=+669.193205220 I0813 09:02:53.256762 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 09:03:36.333227 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-13 09:03:36.333214415 +0000 UTC m=+712.293643500 I0813 09:03:36.333693 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 09:03:36.333714 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-13 09:03:36.333711598 +0000 UTC m=+712.294140683 I0813 09:03:36.348040 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 09:03:36.348303 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0813 09:03:36.348319 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-13 09:03:36.34831539 +0000 UTC m=+712.308744475 I0813 09:03:36.556713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-13 09:03:36.556685293 +0000 UTC m=+712.517114418 I0813 09:03:36.570531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-13 09:03:36.570516904 +0000 UTC m=+712.530945989 I0813 09:03:36.597341 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 09:03:36.597325142 +0000 UTC m=+712.557754227 I0813 09:03:36.615000 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 09:03:36.617136 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-13 09:03:36.617120213 +0000 UTC m=+712.577549308 I0813 09:03:36.618764 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0813 09:03:36.635001 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"