I0907 08:24:54.343535 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0907 08:24:54.343762 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0907 08:24:54.349017 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0907 08:24:54.349051 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0907 08:24:54.349066 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0907 08:24:54.349592 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0907 08:24:54.349737 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0907 08:24:54.349669 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0907 08:24:54.353572 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0907 08:24:54.367903 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0907 08:24:54.371968 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0907 08:24:54.371998 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0907 08:24:54.372075 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0907 08:24:54.375623 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0907 08:24:54.379635 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0907 08:24:54.386411 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0907 08:24:54.392086 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0907 08:24:54.396029 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0907 08:24:54.399264 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0907 08:24:54.401752 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0907 08:24:54.409780 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0907 08:24:54.409820 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0907 08:24:54.409931 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0907 08:24:54.414648 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0907 08:24:54.420021 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0907 08:24:54.424266 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0907 08:24:54.427024 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0907 08:24:54.429377 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0907 08:24:54.429427 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0907 08:24:54.436886 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0907 08:24:54.441503 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0907 08:24:54.441651 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0907 08:24:54.444636 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0907 08:24:54.447385 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0907 08:24:54.450052 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.450114 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.451016 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.451492 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.451834 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.470582 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.495644 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.521843 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.543802 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.569430 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:24:54.591659 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0907 08:25:07.681058 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 08:25:07.681035947 +0000 UTC m=+13.369805774 I0907 08:25:08.455024 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 08:25:08.455014046 +0000 UTC m=+14.143783873 I0907 08:25:08.455065 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:25:08.455308 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 08:25:08.455294281 +0000 UTC m=+14.144064148 E0907 08:25:08.468099 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 08:25:08.468231 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 08:25:08.468215648 +0000 UTC m=+14.156985525 E0907 08:25:08.468282 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 08:25:08.472293 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:25:08.472406 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:25:08.472536 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 08:25:08.472522315 +0000 UTC m=+14.161292192 E0907 08:25:08.482148 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0907 08:25:08.482559 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:25:08.482650 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:25:08.482865 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0907 08:25:08.516593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-07 08:25:08.516583133 +0000 UTC m=+14.205352960 I0907 08:25:08.538898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-07 08:25:08.538889176 +0000 UTC m=+14.227658993 I0907 08:25:08.563343 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:25:08.56332201 +0000 UTC m=+14.252091867 I0907 08:25:08.583091 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:25:08.583616 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:25:08.583605993 +0000 UTC m=+14.272375840 I0907 08:25:08.600140 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:25:13.483455 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:25:13.483440724 +0000 UTC m=+19.172210581 I0907 08:25:38.319921 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 08:25:38.319909842 +0000 UTC m=+44.008679659 I0907 08:25:38.320364 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:25:38.320448 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 08:25:38.32043864 +0000 UTC m=+44.009208487 I0907 08:25:38.337226 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:25:38.337749 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 08:25:38.337733492 +0000 UTC m=+44.026503349 I0907 08:25:38.337916 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:25:38.337998 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 08:25:38.337983166 +0000 UTC m=+44.026753063 I0907 08:25:38.513783 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:25:38.523280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-07 08:25:38.52327073 +0000 UTC m=+44.212040557 I0907 08:25:38.543781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-07 08:25:38.54377206 +0000 UTC m=+44.232541867 I0907 08:25:38.571064 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:25:38.571052838 +0000 UTC m=+44.259822665 I0907 08:25:38.593821 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:25:38.594345 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:25:38.594336488 +0000 UTC m=+44.283106315 I0907 08:25:38.616351 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:25:38.618240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:30:40.364360 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-10.nip.io-tls" condition "Ready" to 2026-09-07 08:30:40.364333892 +0000 UTC m=+346.053103719 I0907 08:30:40.364422 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-10.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:30:40.364462 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-10.nip.io-tls" condition "Issuing" to 2026-09-07 08:30:40.364455835 +0000 UTC m=+346.053225652 I0907 08:30:40.376217 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-10.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-10.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:30:40.376504 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-10.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:30:40.376549 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-10.nip.io-tls" condition "Issuing" to 2026-09-07 08:30:40.376538107 +0000 UTC m=+346.065307964 I0907 08:30:40.526581 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-10.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-10.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:30:40.538367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-10.nip.io-tls-1" condition "Approved" to 2026-09-07 08:30:40.538358343 +0000 UTC m=+346.227128160 I0907 08:30:40.551621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-10.nip.io-tls-1" condition "Ready" to 2026-09-07 08:30:40.551610222 +0000 UTC m=+346.240380039 I0907 08:30:40.570853 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-10.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:30:40.570841226 +0000 UTC m=+346.259611053 I0907 08:30:40.586568 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-10.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-10.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:31:47.470123 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:31:47.470233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 08:31:47.470175032 +0000 UTC m=+413.158944889 I0907 08:31:47.470775 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 08:31:47.470766274 +0000 UTC m=+413.159536121 I0907 08:31:47.484476 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:31:47.484611 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:31:47.484674 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 08:31:47.484661851 +0000 UTC m=+413.173431718 E0907 08:31:47.488370 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 08:31:47.488447 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 08:31:47.488436288 +0000 UTC m=+413.177206145 E0907 08:31:47.488473 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:31:47.504233 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0907 08:31:47.504368 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:31:47.504419 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 08:31:47.504464 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0907 08:31:47.524482 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:31:47.535130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-07 08:31:47.535116682 +0000 UTC m=+413.223886539 I0907 08:31:47.555377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-07 08:31:47.555368639 +0000 UTC m=+413.244138456 I0907 08:31:47.573894 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:31:47.573887922 +0000 UTC m=+413.262657739 I0907 08:31:47.589621 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:31:47.592040 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:31:47.592025426 +0000 UTC m=+413.280795283 I0907 08:31:47.603796 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:31:47.603997 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:31:47.603990243 +0000 UTC m=+413.292760060 I0907 08:31:52.505457 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:31:52.50543509 +0000 UTC m=+418.194204937 I0907 08:32:33.642036 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:32:33.642101 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 08:32:33.642060465 +0000 UTC m=+459.330830282 I0907 08:32:33.642797 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 08:32:33.6427909 +0000 UTC m=+459.331560717 I0907 08:32:33.643076 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 08:32:33.643072816 +0000 UTC m=+459.331842633 I0907 08:32:33.643262 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:32:33.643286 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 08:32:33.64328231 +0000 UTC m=+459.332052127 I0907 08:32:33.643646 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:32:33.643662 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 08:32:33.643659187 +0000 UTC m=+459.332428994 I0907 08:32:33.643858 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 08:32:33.643854671 +0000 UTC m=+459.332624488 I0907 08:32:33.673228 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:33.673902 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:33.674352 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:33.677993 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 08:32:33.677979187 +0000 UTC m=+459.366749004 I0907 08:32:33.678093 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 08:32:33.678080719 +0000 UTC m=+459.366850536 I0907 08:32:33.678772 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:32:33.678789 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 08:32:33.678786163 +0000 UTC m=+459.367555980 I0907 08:32:33.852748 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:33.873817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-07 08:32:33.873806766 +0000 UTC m=+459.562576583 I0907 08:32:33.892131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-07 08:32:33.892122809 +0000 UTC m=+459.580892636 I0907 08:32:33.923142 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:33.928530 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:33.928519671 +0000 UTC m=+459.617289488 I0907 08:32:33.937911 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:33.951148 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:33.951572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-07 08:32:33.951563257 +0000 UTC m=+459.640333074 I0907 08:32:33.979184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-07 08:32:33.979175384 +0000 UTC m=+459.667945191 I0907 08:32:34.229148 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:34.229135122 +0000 UTC m=+459.917904939 I0907 08:32:34.280073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:34.330202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-07 08:32:34.330192073 +0000 UTC m=+460.018961890 I0907 08:32:34.374169 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:34.475725 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:34.476195 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:34.476187272 +0000 UTC m=+460.164957099 I0907 08:32:34.531096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-07 08:32:34.53108671 +0000 UTC m=+460.219856527 I0907 08:32:35.004812 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:35.004788427 +0000 UTC m=+460.693558354 I0907 08:32:35.178527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:35.227364 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:35.283141 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:35.283128012 +0000 UTC m=+460.971897869 I0907 08:32:35.432298 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:35.433179 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:35.433168851 +0000 UTC m=+461.121938708 I0907 08:32:35.629203 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:42.067573 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" condition "Ready" to 2026-09-07 08:32:42.067551053 +0000 UTC m=+467.756320860 I0907 08:32:42.071381 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:32:42.071413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" condition "Issuing" to 2026-09-07 08:32:42.071405709 +0000 UTC m=+467.760175526 I0907 08:32:42.084093 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:42.084258 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:32:42.084299 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" condition "Issuing" to 2026-09-07 08:32:42.084292063 +0000 UTC m=+467.773061880 I0907 08:32:42.343945 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:42.362291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls-1" condition "Approved" to 2026-09-07 08:32:42.362275884 +0000 UTC m=+468.051045701 I0907 08:32:42.379494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls-1" condition "Ready" to 2026-09-07 08:32:42.379483562 +0000 UTC m=+468.068253379 I0907 08:32:42.405396 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:42.405378212 +0000 UTC m=+468.094148039 I0907 08:32:42.421882 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gbpb7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:55.660293 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:32:55.660296 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 08:32:55.660282018 +0000 UTC m=+481.349051835 I0907 08:32:55.660326 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 08:32:55.660317829 +0000 UTC m=+481.349087646 I0907 08:32:55.671104 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:55.671278 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 08:32:55.671268763 +0000 UTC m=+481.360038580 I0907 08:32:55.792022 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:32:55.823433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-07 08:32:55.823423101 +0000 UTC m=+481.512192918 I0907 08:32:55.837083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-07 08:32:55.837074347 +0000 UTC m=+481.525844164 I0907 08:32:55.869536 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:55.86952354 +0000 UTC m=+481.558293357 I0907 08:32:55.886634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:36:11.724551 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 08:36:11.724528265 +0000 UTC m=+677.413298112 I0907 08:36:11.727009 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:36:11.727055 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 08:36:11.727047049 +0000 UTC m=+677.415816896 I0907 08:36:11.763721 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:36:11.763901 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:36:11.763933 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 08:36:11.763922798 +0000 UTC m=+677.452692655 I0907 08:36:12.005680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-07 08:36:12.005667211 +0000 UTC m=+677.694437058 I0907 08:36:12.027064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-07 08:36:12.027054244 +0000 UTC m=+677.715824061 I0907 08:36:12.068881 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:36:12.068858406 +0000 UTC m=+677.757628223 I0907 08:36:12.086474 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:36:12.096327 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:36:54.822077 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-07 08:36:54.822064462 +0000 UTC m=+720.510834279 I0907 08:36:54.823216 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:36:54.823287 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 08:36:54.82327764 +0000 UTC m=+720.512047497 I0907 08:36:54.844296 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:36:54.844385 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 08:36:54.844414 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-07 08:36:54.844404712 +0000 UTC m=+720.533174559 I0907 08:36:54.999425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-07 08:36:54.999415505 +0000 UTC m=+720.688185322 I0907 08:36:55.021945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-07 08:36:55.02193694 +0000 UTC m=+720.710706757 I0907 08:36:55.058113 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:36:55.058099631 +0000 UTC m=+720.746869458 I0907 08:36:55.084288 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:36:55.087428 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:36:55.087413868 +0000 UTC m=+720.776183675 I0907 08:36:55.090972 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 08:36:55.102527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"