I0902 12:19:55.268345 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0902 12:19:55.268535 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0902 12:19:55.272544 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0902 12:19:55.272571 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0902 12:19:55.272580 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0902 12:19:55.272996 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0902 12:19:55.273104 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0902 12:19:55.273149 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0902 12:19:55.275664 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0902 12:19:55.289592 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0902 12:19:55.296285 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0902 12:19:55.296312 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0902 12:19:55.296322 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0902 12:19:55.298054 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0902 12:19:55.308891 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0902 12:19:55.314396 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0902 12:19:55.318558 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0902 12:19:55.323072 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0902 12:19:55.323237 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0902 12:19:55.326976 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0902 12:19:55.327178 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0902 12:19:55.330815 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0902 12:19:55.337002 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0902 12:19:55.339661 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0902 12:19:55.339774 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0902 12:19:55.342313 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0902 12:19:55.344737 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0902 12:19:55.347572 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0902 12:19:55.350089 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0902 12:19:55.352585 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0902 12:19:55.355123 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0902 12:19:55.359363 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0902 12:19:55.362813 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0902 12:19:55.365945 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0902 12:19:55.370176 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.370310 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.370597 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.370633 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.370866 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.371346 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.398621 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.417470 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.443312 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.466014 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:19:55.486311 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 12:20:07.308565 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-02 12:20:07.308541299 +0000 UTC m=+12.071543299 I0902 12:20:08.120160 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-02 12:20:08.120150627 +0000 UTC m=+12.883152597 I0902 12:20:08.121261 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:20:08.121296 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-02 12:20:08.121291741 +0000 UTC m=+12.884293711 I0902 12:20:08.138831 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:20:08.139006 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:20:08.139064 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-02 12:20:08.139059079 +0000 UTC m=+12.902061049 E0902 12:20:08.142158 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 12:20:08.142272 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-02 12:20:08.142258817 +0000 UTC m=+12.905260817 E0902 12:20:08.142308 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 12:20:08.157750 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0902 12:20:08.158746 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 12:20:08.158809 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 12:20:08.158848 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0902 12:20:08.183100 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:20:08.198058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-02 12:20:08.198042332 +0000 UTC m=+12.961044332 I0902 12:20:08.223139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-02 12:20:08.223120956 +0000 UTC m=+12.986122956 I0902 12:20:08.257042 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:20:08.257018644 +0000 UTC m=+13.020020644 I0902 12:20:08.271341 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:20:08.272030 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:20:08.2720207 +0000 UTC m=+13.035022710 I0902 12:20:08.288145 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:20:13.158247 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:20:13.15823395 +0000 UTC m=+17.921235950 I0902 12:20:36.720596 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:20:36.720654 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-02 12:20:36.720648618 +0000 UTC m=+41.483650588 I0902 12:20:36.730181 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-02 12:20:36.730176677 +0000 UTC m=+41.493178647 I0902 12:20:36.735804 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-02 12:20:36.73579196 +0000 UTC m=+41.498793940 I0902 12:20:36.760112 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:20:36.760197 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-02 12:20:36.760188888 +0000 UTC m=+41.523190858 I0902 12:20:37.145697 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:20:37.179765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-02 12:20:37.17974842 +0000 UTC m=+41.942750420 I0902 12:20:37.204575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-02 12:20:37.204562952 +0000 UTC m=+41.967564932 I0902 12:20:37.233357 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:20:37.233342529 +0000 UTC m=+41.996344529 I0902 12:20:37.252509 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:20:37.253158 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:20:37.253149964 +0000 UTC m=+42.016151964 I0902 12:20:37.269659 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:26:09.733361 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Ready" to 2026-09-02 12:26:09.733293416 +0000 UTC m=+374.496295426 I0902 12:26:09.733596 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-206.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:26:09.733646 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Issuing" to 2026-09-02 12:26:09.733639291 +0000 UTC m=+374.496641301 I0902 12:26:09.748649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:26:09.748732 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Ready" to 2026-09-02 12:26:09.74872254 +0000 UTC m=+374.511724540 I0902 12:26:09.852132 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:26:09.878885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-206.nip.io-tls-1" condition "Approved" to 2026-09-02 12:26:09.87887057 +0000 UTC m=+374.641872580 I0902 12:26:09.895361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-206.nip.io-tls-1" condition "Ready" to 2026-09-02 12:26:09.89534486 +0000 UTC m=+374.658346870 I0902 12:26:09.917407 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-206.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:26:09.917398319 +0000 UTC m=+374.680400289 I0902 12:26:09.933116 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:26:09.970929 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-206.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-206.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:27:19.334795 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:27:19.334862 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-02 12:27:19.334852543 +0000 UTC m=+444.097854553 I0902 12:27:19.335285 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-02 12:27:19.33527805 +0000 UTC m=+444.098280050 E0902 12:27:19.346735 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 12:27:19.346821 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-02 12:27:19.346810721 +0000 UTC m=+444.109812731 E0902 12:27:19.346848 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 12:27:19.347658 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:27:19.347732 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-02 12:27:19.347723204 +0000 UTC m=+444.110725204 E0902 12:27:19.354988 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0902 12:27:19.355082 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 12:27:19.355120 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 12:27:19.355156 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0902 12:27:19.368994 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:27:19.395690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-02 12:27:19.395674884 +0000 UTC m=+444.158676884 I0902 12:27:19.412889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-02 12:27:19.412874709 +0000 UTC m=+444.175876709 I0902 12:27:19.436102 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:27:19.436091922 +0000 UTC m=+444.199093892 I0902 12:27:19.449756 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:27:19.492032 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:27:24.356148 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:27:24.356139411 +0000 UTC m=+449.119141381 I0902 12:28:04.689031 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:28:04.689085 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-02 12:28:04.689078117 +0000 UTC m=+489.452080087 I0902 12:28:04.689245 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-02 12:28:04.689241039 +0000 UTC m=+489.452242999 I0902 12:28:04.689781 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:28:04.689814 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-02 12:28:04.689807277 +0000 UTC m=+489.452809247 I0902 12:28:04.690184 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-02 12:28:04.690179892 +0000 UTC m=+489.453181862 I0902 12:28:04.690587 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:28:04.690636 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-02 12:28:04.690632979 +0000 UTC m=+489.453634949 I0902 12:28:04.690890 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-02 12:28:04.690872772 +0000 UTC m=+489.453874742 I0902 12:28:04.719319 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:04.719818 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:28:04.719842 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-02 12:28:04.719836429 +0000 UTC m=+489.482838399 I0902 12:28:04.723670 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:04.723733 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-02 12:28:04.723723835 +0000 UTC m=+489.486725805 I0902 12:28:04.724043 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:04.724087 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:28:04.724102 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-02 12:28:04.724099111 +0000 UTC m=+489.487101081 I0902 12:28:04.900384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-02 12:28:04.900365227 +0000 UTC m=+489.663367197 I0902 12:28:04.914542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-02 12:28:04.914529961 +0000 UTC m=+489.677531931 I0902 12:28:04.941454 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:28:04.941433118 +0000 UTC m=+489.704435078 I0902 12:28:04.958181 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:04.958740 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:28:04.958733177 +0000 UTC m=+489.721735137 I0902 12:28:04.979260 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:04.982427 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:05.022553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-02 12:28:05.022538735 +0000 UTC m=+489.785540705 I0902 12:28:05.035309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-02 12:28:05.035300859 +0000 UTC m=+489.798302829 I0902 12:28:05.058753 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:28:05.058746366 +0000 UTC m=+489.821748336 I0902 12:28:05.078566 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:05.210954 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:05.407770 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:05.464436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-02 12:28:05.464424211 +0000 UTC m=+490.227426181 I0902 12:28:05.615507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-02 12:28:05.615494833 +0000 UTC m=+490.378496803 I0902 12:28:06.215034 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:28:06.215014355 +0000 UTC m=+490.978016355 I0902 12:28:06.259448 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:06.361784 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:06.362651 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:28:06.362638417 +0000 UTC m=+491.125640417 I0902 12:28:06.609771 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:06.659756 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:13.488473 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:28:13.488550 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls" condition "Issuing" to 2026-09-02 12:28:13.488509909 +0000 UTC m=+498.251511909 I0902 12:28:13.489102 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls" condition "Ready" to 2026-09-02 12:28:13.489068487 +0000 UTC m=+498.252070487 I0902 12:28:13.505888 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:13.505967 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls" condition "Ready" to 2026-09-02 12:28:13.505959629 +0000 UTC m=+498.268961629 I0902 12:28:13.669298 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:13.700338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls-1" condition "Approved" to 2026-09-02 12:28:13.700315113 +0000 UTC m=+498.463317113 I0902 12:28:13.719851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls-1" condition "Ready" to 2026-09-02 12:28:13.719836152 +0000 UTC m=+498.482838152 I0902 12:28:13.760743 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:28:13.760729718 +0000 UTC m=+498.523731698 I0902 12:28:13.779537 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cvzmm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:25.795535 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-02 12:28:25.795521303 +0000 UTC m=+510.558523283 I0902 12:28:25.795933 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:28:25.795973 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-02 12:28:25.795968709 +0000 UTC m=+510.558970689 I0902 12:28:25.811381 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:25.811491 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:28:25.811520 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-02 12:28:25.811512641 +0000 UTC m=+510.574514611 I0902 12:28:26.141116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-02 12:28:26.141099154 +0000 UTC m=+510.904101124 I0902 12:28:26.165094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-02 12:28:26.165078415 +0000 UTC m=+510.928080385 I0902 12:28:26.199786 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:28:26.199768119 +0000 UTC m=+510.962770089 I0902 12:28:26.216448 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:28:26.216841 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:28:26.216830142 +0000 UTC m=+510.979832112 I0902 12:28:26.230099 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:31:54.448703 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-02 12:31:54.44869021 +0000 UTC m=+719.211692180 I0902 12:31:54.448726 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:31:54.449023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-02 12:31:54.448965418 +0000 UTC m=+719.211967478 I0902 12:31:54.461312 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:31:54.461398 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:31:54.461418 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-02 12:31:54.461412894 +0000 UTC m=+719.224414854 I0902 12:31:54.726344 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:31:54.744840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-02 12:31:54.74482592 +0000 UTC m=+719.507827910 I0902 12:31:54.766929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-02 12:31:54.76691481 +0000 UTC m=+719.529916820 I0902 12:31:54.789529 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:31:54.789517916 +0000 UTC m=+719.552519886 I0902 12:31:54.805316 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:31:54.805944 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:31:54.805935689 +0000 UTC m=+719.568937659 I0902 12:31:54.821801 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:32:37.783304 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:32:37.783374 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-02 12:32:37.783364145 +0000 UTC m=+762.546366155 I0902 12:32:37.783373 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-02 12:32:37.783353475 +0000 UTC m=+762.546355475 I0902 12:32:37.802030 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:32:37.802187 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 12:32:37.802244 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-02 12:32:37.802233572 +0000 UTC m=+762.565235602 I0902 12:32:38.049064 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:32:38.062327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-02 12:32:38.062314876 +0000 UTC m=+762.825316866 I0902 12:32:38.081149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-02 12:32:38.08113358 +0000 UTC m=+762.844135590 I0902 12:32:38.107013 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 12:32:38.107002427 +0000 UTC m=+762.870004407 I0902 12:32:38.120669 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 12:32:38.158806 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"