I0812 01:01:50.402329 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0812 01:01:50.402540 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 01:01:50.406549 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0812 01:01:50.406586 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0812 01:01:50.406600 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0812 01:01:50.407681 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0812 01:01:50.408835 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0812 01:01:50.409330 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0812 01:01:50.417995 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 01:01:50.431700 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0812 01:01:50.431971 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0812 01:01:50.435690 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0812 01:01:50.440108 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0812 01:01:50.447400 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0812 01:01:50.450730 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0812 01:01:50.453550 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0812 01:01:50.456027 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0812 01:01:50.456130 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0812 01:01:50.459344 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0812 01:01:50.467024 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0812 01:01:50.470191 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0812 01:01:50.474930 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0812 01:01:50.478079 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0812 01:01:50.480559 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0812 01:01:50.483055 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0812 01:01:50.483083 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0812 01:01:50.483096 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0812 01:01:50.483105 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0812 01:01:50.483186 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0812 01:01:50.488982 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0812 01:01:50.491791 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0812 01:01:50.494272 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0812 01:01:50.496921 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0812 01:01:50.499874 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0812 01:01:50.502471 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.503029 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.503571 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.503955 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.504182 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.524102 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.545345 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.570084 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.591466 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.616315 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:01:50.633895 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0812 01:02:01.834417 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-12 01:02:01.834391794 +0000 UTC m=+11.464082929 I0812 01:02:02.601995 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-12 01:02:02.601975768 +0000 UTC m=+12.231666933 I0812 01:02:02.602126 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:02:02.602365 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 01:02:02.602349072 +0000 UTC m=+12.232040237 I0812 01:02:02.621177 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0812 01:02:02.621218 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 01:02:02.621304 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:02:02.621303 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-12 01:02:02.621290216 +0000 UTC m=+12.250981361 E0812 01:02:02.621410 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 01:02:02.621383 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 01:02:02.621357498 +0000 UTC m=+12.251048643 E0812 01:02:02.636032 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0812 01:02:02.636139 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 01:02:02.636163 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 01:02:02.636191 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0812 01:02:02.674674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-12 01:02:02.674653889 +0000 UTC m=+12.304345064 I0812 01:02:02.696520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-12 01:02:02.696503421 +0000 UTC m=+12.326194586 I0812 01:02:02.722170 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:02:02.722159185 +0000 UTC m=+12.351850330 I0812 01:02:02.736987 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:02:02.737313 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:02:02.737307998 +0000 UTC m=+12.366999143 I0812 01:02:02.750484 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:02:07.637547 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:02:07.637521313 +0000 UTC m=+17.267212478 I0812 01:02:30.512707 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-12 01:02:30.512690037 +0000 UTC m=+40.142381182 I0812 01:02:30.512695 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:02:30.514624 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 01:02:30.51461652 +0000 UTC m=+40.144307665 I0812 01:02:30.523712 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-12 01:02:30.523698535 +0000 UTC m=+40.153389680 I0812 01:02:30.601884 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:02:30.601981 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:02:30.602055 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 01:02:30.602001712 +0000 UTC m=+40.231692847 I0812 01:02:30.926571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-12 01:02:30.926558505 +0000 UTC m=+40.556249640 I0812 01:02:30.959094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-12 01:02:30.959079054 +0000 UTC m=+40.588770199 I0812 01:02:30.994964 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:02:30.994947393 +0000 UTC m=+40.624638538 I0812 01:02:31.018894 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:02:31.021567 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:02:31.021542437 +0000 UTC m=+40.651233582 I0812 01:02:31.023206 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:02:31.032718 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:02:31.034086 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:02:31.034076262 +0000 UTC m=+40.663767407 I0812 01:02:31.036857 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:07:04.264978 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-18.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:07:04.265049 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Issuing" to 2026-08-12 01:07:04.265040034 +0000 UTC m=+313.894731179 I0812 01:07:04.265250 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Ready" to 2026-08-12 01:07:04.265231347 +0000 UTC m=+313.894922492 I0812 01:07:04.278455 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-18.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-18.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:07:04.278557 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Ready" to 2026-08-12 01:07:04.278548877 +0000 UTC m=+313.908240022 I0812 01:07:04.449731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-18.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-18.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:07:04.484457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-18.nip.io-tls-1" condition "Approved" to 2026-08-12 01:07:04.484433582 +0000 UTC m=+314.114124757 I0812 01:07:04.498687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-18.nip.io-tls-1" condition "Ready" to 2026-08-12 01:07:04.498673155 +0000 UTC m=+314.128364300 I0812 01:07:04.521230 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:07:04.521218454 +0000 UTC m=+314.150909589 I0812 01:07:04.535501 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-18.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-18.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:07:04.536255 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-18.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:07:04.53624735 +0000 UTC m=+314.165938485 I0812 01:07:04.541090 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-18.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-18.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:07:04.549863 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-18.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-18.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:08.989593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-12 01:08:08.989551863 +0000 UTC m=+378.619243038 I0812 01:08:08.990238 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:08:08.990391 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 01:08:08.990373473 +0000 UTC m=+378.620064638 E0812 01:08:09.002718 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 01:08:09.002793 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-12 01:08:09.002782906 +0000 UTC m=+378.632474061 E0812 01:08:09.002814 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 01:08:09.002961 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:09.003046 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:08:09.003073 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 01:08:09.00306391 +0000 UTC m=+378.632755055 E0812 01:08:09.013352 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0812 01:08:09.013970 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 01:08:09.014060 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 01:08:09.014218 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0812 01:08:09.041545 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:09.054750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-12 01:08:09.054731454 +0000 UTC m=+378.684422619 I0812 01:08:09.069692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-12 01:08:09.06967747 +0000 UTC m=+378.699368615 I0812 01:08:09.092101 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:08:09.092076873 +0000 UTC m=+378.721768018 I0812 01:08:09.105860 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:09.164231 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:14.014775 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:08:14.014754678 +0000 UTC m=+383.644445843 I0812 01:08:56.839436 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 01:08:56.839424033 +0000 UTC m=+426.469115168 I0812 01:08:56.839801 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:08:56.839846 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 01:08:56.839837278 +0000 UTC m=+426.469528403 I0812 01:08:56.843287 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:08:56.843317 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-12 01:08:56.8433107 +0000 UTC m=+426.473001835 I0812 01:08:56.843609 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 01:08:56.843604344 +0000 UTC m=+426.473295479 I0812 01:08:56.871774 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:56.873770 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:56.879676 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:08:56.879701 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 01:08:56.879695512 +0000 UTC m=+426.509386647 I0812 01:08:56.880012 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 01:08:56.880008967 +0000 UTC m=+426.509700102 I0812 01:08:56.880173 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:08:56.880189 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-12 01:08:56.880186849 +0000 UTC m=+426.509877974 I0812 01:08:56.881794 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 01:08:56.881780478 +0000 UTC m=+426.511471613 I0812 01:08:56.907500 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:56.907573 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 01:08:56.907565991 +0000 UTC m=+426.537257126 I0812 01:08:57.016341 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:57.039301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-12 01:08:57.039293602 +0000 UTC m=+426.668984737 I0812 01:08:57.055486 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:57.056471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-12 01:08:57.056464711 +0000 UTC m=+426.686155846 I0812 01:08:57.075587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-12 01:08:57.075578012 +0000 UTC m=+426.705269137 I0812 01:08:57.077345 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:08:57.077339084 +0000 UTC m=+426.707030219 I0812 01:08:57.088835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-12 01:08:57.088826364 +0000 UTC m=+426.718517499 I0812 01:08:57.092401 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:57.093040 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:08:57.093030105 +0000 UTC m=+426.722721250 I0812 01:08:57.114514 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:57.164510 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:57.222743 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:08:57.222734479 +0000 UTC m=+426.852425604 I0812 01:08:57.423172 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:57.464596 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:57.734546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-12 01:08:57.734532882 +0000 UTC m=+427.364224017 I0812 01:08:58.074205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-12 01:08:58.074194564 +0000 UTC m=+427.703885699 I0812 01:08:58.417340 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:58.469719 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:08:58.469707669 +0000 UTC m=+428.099398814 I0812 01:08:58.566087 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:58.566771 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:08:58.566757666 +0000 UTC m=+428.196448811 I0812 01:08:58.816775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:08:58.869724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:09:04.960568 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" condition "Ready" to 2026-08-12 01:09:04.960553417 +0000 UTC m=+434.590244572 I0812 01:09:04.960767 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:09:04.960787 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" condition "Issuing" to 2026-08-12 01:09:04.96078407 +0000 UTC m=+434.590475205 I0812 01:09:04.969914 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xblhp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:09:04.969976 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:09:04.969994 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" condition "Issuing" to 2026-08-12 01:09:04.969988751 +0000 UTC m=+434.599679886 I0812 01:09:05.205092 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xblhp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:09:05.219867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xblhp-tls-1" condition "Approved" to 2026-08-12 01:09:05.219852584 +0000 UTC m=+434.849543749 I0812 01:09:05.240426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xblhp-tls-1" condition "Ready" to 2026-08-12 01:09:05.240417401 +0000 UTC m=+434.870108536 I0812 01:09:05.272140 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:09:05.272123152 +0000 UTC m=+434.901814297 I0812 01:09:05.282653 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xblhp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xblhp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:09:18.884580 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 01:09:18.884564509 +0000 UTC m=+448.514255644 I0812 01:09:18.884926 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:09:18.887932 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 01:09:18.887921288 +0000 UTC m=+448.517612423 I0812 01:09:18.895544 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:09:18.895669 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:09:18.895694 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 01:09:18.8956886 +0000 UTC m=+448.525379735 I0812 01:09:19.233876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-12 01:09:19.233865768 +0000 UTC m=+448.863556903 I0812 01:09:19.251277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-12 01:09:19.251268444 +0000 UTC m=+448.880959569 I0812 01:09:19.275028 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:09:19.275014454 +0000 UTC m=+448.904705619 I0812 01:09:19.288209 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:09:19.288659 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:09:19.288650876 +0000 UTC m=+448.918342011 I0812 01:09:19.298895 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:09:19.299281 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:12:33.828400 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:12:33.828460 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 01:12:33.828449664 +0000 UTC m=+643.458140799 I0812 01:12:33.828439 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 01:12:33.828409903 +0000 UTC m=+643.458101058 I0812 01:12:33.844638 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:12:33.844849 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:12:33.844929 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 01:12:33.844898446 +0000 UTC m=+643.474589591 I0812 01:12:34.135956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:12:34.154887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-12 01:12:34.154852386 +0000 UTC m=+643.784543561 I0812 01:12:34.171351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-12 01:12:34.171335649 +0000 UTC m=+643.801026794 I0812 01:12:34.200392 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:12:34.200372783 +0000 UTC m=+643.830063958 I0812 01:12:34.219448 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:12:34.220083 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:12:34.220073379 +0000 UTC m=+643.849764514 I0812 01:12:34.225823 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:12:34.237140 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:13:20.102850 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-12 01:13:20.102833875 +0000 UTC m=+689.732525020 I0812 01:13:20.102884 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 01:13:20.102945 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-12 01:13:20.102935066 +0000 UTC m=+689.732626211 I0812 01:13:20.115508 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:13:20.115730 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-12 01:13:20.115719558 +0000 UTC m=+689.745410703 I0812 01:13:20.316951 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 01:13:20.347644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-12 01:13:20.347631093 +0000 UTC m=+689.977322248 I0812 01:13:20.363929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-12 01:13:20.363919822 +0000 UTC m=+689.993610957 I0812 01:13:20.388817 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 01:13:20.38880498 +0000 UTC m=+690.018496125 I0812 01:13:20.405691 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"