I0915 22:06:28.951934 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0915 22:06:28.952181 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0915 22:06:28.957520 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0915 22:06:28.957558 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0915 22:06:28.957575 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0915 22:06:28.958284 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0915 22:06:28.958290 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0915 22:06:28.958347 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0915 22:06:28.964737 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0915 22:06:28.984161 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0915 22:06:28.992946 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0915 22:06:28.998110 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0915 22:06:29.002362 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0915 22:06:29.002396 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0915 22:06:29.002410 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0915 22:06:29.002556 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0915 22:06:29.006831 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0915 22:06:29.013542 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0915 22:06:29.017695 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0915 22:06:29.021532 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0915 22:06:29.025106 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0915 22:06:29.027799 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0915 22:06:29.027962 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0915 22:06:29.030680 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0915 22:06:29.030804 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0915 22:06:29.037210 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0915 22:06:29.039772 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0915 22:06:29.042551 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0915 22:06:29.046111 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0915 22:06:29.050336 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0915 22:06:29.054341 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0915 22:06:29.056822 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0915 22:06:29.064465 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0915 22:06:29.064527 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0915 22:06:29.068542 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.069895 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.069903 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.070112 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.070550 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.095157 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.116770 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.160826 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.191394 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.216796 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:29.234853 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 22:06:41.399690 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-15 22:06:41.399659786 +0000 UTC m=+12.476916686 I0915 22:06:42.102424 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:06:42.102582 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-15 22:06:42.102571056 +0000 UTC m=+13.179827946 I0915 22:06:42.103972 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 22:06:42.1039507 +0000 UTC m=+13.181207590 E0915 22:06:42.112563 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 22:06:42.112607 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-15 22:06:42.112599391 +0000 UTC m=+13.189856251 E0915 22:06:42.112644 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 22:06:42.120257 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:06:42.120316 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 22:06:42.120309186 +0000 UTC m=+13.197566046 E0915 22:06:42.130815 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0915 22:06:42.131081 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 22:06:42.131150 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 22:06:42.131190 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0915 22:06:42.138778 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:06:42.139432 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 22:06:42.13942055 +0000 UTC m=+13.216677450 I0915 22:06:42.164976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-15 22:06:42.164959827 +0000 UTC m=+13.242216727 E0915 22:06:42.180514 1 controller.go:162] "re-queuing item due to error processing" err="certificaterequests.cert-manager.io \"self-signed-ca-1\" already exists" logger="cert-manager.controller" key="cert-manager/self-signed-ca" I0915 22:06:42.185763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-15 22:06:42.185751389 +0000 UTC m=+13.263008250 I0915 22:06:42.201699 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:06:42.201687659 +0000 UTC m=+13.278944529 I0915 22:06:42.215380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:06:42.215589 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:06:42.215583012 +0000 UTC m=+13.292839872 I0915 22:06:42.226799 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:06:47.132037 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:06:47.132013482 +0000 UTC m=+18.209270372 I0915 22:07:11.423564 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-15 22:07:11.423543608 +0000 UTC m=+42.500800498 I0915 22:07:11.424313 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:07:11.424378 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 22:07:11.424371479 +0000 UTC m=+42.501628369 I0915 22:07:11.444069 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:07:11.444086 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-15 22:07:11.444075612 +0000 UTC m=+42.521332482 I0915 22:07:11.452949 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:07:11.453057 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 22:07:11.453047431 +0000 UTC m=+42.530304291 I0915 22:07:11.698931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-15 22:07:11.698909148 +0000 UTC m=+42.776166038 I0915 22:07:11.738796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-15 22:07:11.73877751 +0000 UTC m=+42.816034380 I0915 22:07:11.773751 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:07:11.773736341 +0000 UTC m=+42.850993211 I0915 22:07:11.800435 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:12:21.131647 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-6.nip.io-tls" condition "Ready" to 2026-09-15 22:12:21.131620356 +0000 UTC m=+352.208877246 I0915 22:12:21.132154 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-6.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:12:21.132240 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-6.nip.io-tls" condition "Issuing" to 2026-09-15 22:12:21.13223237 +0000 UTC m=+352.209489240 I0915 22:12:21.143312 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-6.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-6.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:12:21.143420 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-6.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:12:21.143478 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-6.nip.io-tls" condition "Issuing" to 2026-09-15 22:12:21.143471316 +0000 UTC m=+352.220728186 I0915 22:12:21.324877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-6.nip.io-tls-1" condition "Approved" to 2026-09-15 22:12:21.324867387 +0000 UTC m=+352.402124257 I0915 22:12:21.342255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-6.nip.io-tls-1" condition "Ready" to 2026-09-15 22:12:21.342240228 +0000 UTC m=+352.419497128 I0915 22:12:21.370259 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-6.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:12:21.370242721 +0000 UTC m=+352.447499611 I0915 22:12:21.387384 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-6.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-6.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:12:21.388197 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-6.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:12:21.388186103 +0000 UTC m=+352.465442993 I0915 22:12:21.394790 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-6.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-6.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:12:21.400434 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-6.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-6.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:13:34.528005 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:13:34.528058 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 22:13:34.528046815 +0000 UTC m=+425.605303705 I0915 22:13:34.528201 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-15 22:13:34.528179926 +0000 UTC m=+425.605436816 I0915 22:13:34.545339 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0915 22:13:34.545511 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 22:13:34.545591 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-15 22:13:34.545581515 +0000 UTC m=+425.622838405 E0915 22:13:34.545621 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 22:13:34.545898 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-15 22:13:34.545877321 +0000 UTC m=+425.623134271 E0915 22:13:34.559582 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0915 22:13:34.559932 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 22:13:34.559991 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 22:13:34.560859 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0915 22:13:34.575900 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:13:34.603390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-15 22:13:34.603365614 +0000 UTC m=+425.680622544 I0915 22:13:34.622313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-15 22:13:34.62229533 +0000 UTC m=+425.699552230 I0915 22:13:34.650568 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:13:34.650547688 +0000 UTC m=+425.727804588 I0915 22:13:34.666725 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:13:34.667166 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:13:34.667154422 +0000 UTC m=+425.744411312 I0915 22:13:34.685856 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:13:34.686237 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:13:34.686228001 +0000 UTC m=+425.763484871 I0915 22:13:34.692507 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:13:39.560028 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:13:39.560013553 +0000 UTC m=+430.637270483 I0915 22:14:23.498198 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:14:23.498273 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-15 22:14:23.49826675 +0000 UTC m=+474.575523610 I0915 22:14:23.500910 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-15 22:14:23.500892854 +0000 UTC m=+474.578149724 I0915 22:14:23.508037 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:14:23.508077 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-15 22:14:23.508067635 +0000 UTC m=+474.585324515 I0915 22:14:23.508405 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:14:23.508426 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-15 22:14:23.508421452 +0000 UTC m=+474.585678312 I0915 22:14:23.508983 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-15 22:14:23.50897527 +0000 UTC m=+474.586232140 I0915 22:14:23.512529 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-15 22:14:23.507339833 +0000 UTC m=+474.584596703 I0915 22:14:23.525794 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:23.525868 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:14:23.525894 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-15 22:14:23.525887145 +0000 UTC m=+474.603144005 I0915 22:14:23.537734 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:23.539141 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:14:23.539169 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-15 22:14:23.539163789 +0000 UTC m=+474.616420639 I0915 22:14:23.540672 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:23.540744 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-15 22:14:23.540736075 +0000 UTC m=+474.617992935 I0915 22:14:23.676940 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:23.687200 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:23.688228 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:23.696936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-15 22:14:23.696928024 +0000 UTC m=+474.774184874 I0915 22:14:23.702706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-15 22:14:23.702686071 +0000 UTC m=+474.779942921 I0915 22:14:23.710569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-15 22:14:23.710564923 +0000 UTC m=+474.787821783 I0915 22:14:23.712348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-15 22:14:23.712344003 +0000 UTC m=+474.789600863 I0915 22:14:23.713801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-15 22:14:23.713797437 +0000 UTC m=+474.791054297 I0915 22:14:23.724308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-15 22:14:23.724298764 +0000 UTC m=+474.801555644 I0915 22:14:23.984664 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:23.984647316 +0000 UTC m=+475.061904176 I0915 22:14:24.029927 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:24.029915717 +0000 UTC m=+475.107172577 I0915 22:14:24.276746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:24.277197 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:24.277191163 +0000 UTC m=+475.354448023 I0915 22:14:24.375551 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:24.376229 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:24.376207258 +0000 UTC m=+475.453464128 I0915 22:14:24.430215 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:24.430178544 +0000 UTC m=+475.507435414 I0915 22:14:24.879439 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:24.880304 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:24.88029485 +0000 UTC m=+475.957551740 I0915 22:14:24.977739 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:25.027899 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:25.075946 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:25.427613 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:25.477419 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:32.630055 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" condition "Ready" to 2026-09-15 22:14:32.630040432 +0000 UTC m=+483.707297322 I0915 22:14:32.630069 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:14:32.630335 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" condition "Issuing" to 2026-09-15 22:14:32.630321876 +0000 UTC m=+483.707578776 I0915 22:14:32.652956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:32.653210 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" condition "Ready" to 2026-09-15 22:14:32.653194336 +0000 UTC m=+483.730451236 I0915 22:14:32.871689 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:32.918677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls-1" condition "Approved" to 2026-09-15 22:14:32.918663747 +0000 UTC m=+483.995920627 I0915 22:14:32.941176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls-1" condition "Ready" to 2026-09-15 22:14:32.941166821 +0000 UTC m=+484.018423701 I0915 22:14:33.042983 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:33.042964732 +0000 UTC m=+484.120221632 I0915 22:14:33.080132 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:33.081107 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:33.081098224 +0000 UTC m=+484.158355094 I0915 22:14:33.136529 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qgs8k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:45.022098 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-15 22:14:45.022086851 +0000 UTC m=+496.099343711 I0915 22:14:45.022432 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:14:45.022449 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-15 22:14:45.022446467 +0000 UTC m=+496.099703327 I0915 22:14:45.035498 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:45.035600 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-15 22:14:45.035589501 +0000 UTC m=+496.112846371 I0915 22:14:45.241806 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:14:45.292009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-15 22:14:45.291996598 +0000 UTC m=+496.369253468 I0915 22:14:45.313610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-15 22:14:45.313599831 +0000 UTC m=+496.390856691 I0915 22:14:45.364895 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:14:45.364881428 +0000 UTC m=+496.442138288 I0915 22:14:45.381194 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:18:05.427770 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:18:05.427845 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 22:18:05.427820873 +0000 UTC m=+696.505077793 I0915 22:18:05.427909 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-15 22:18:05.427898496 +0000 UTC m=+696.505155426 I0915 22:18:05.442257 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:18:05.442343 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 22:18:05.442331631 +0000 UTC m=+696.519588521 I0915 22:18:05.530740 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:18:05.554554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-15 22:18:05.554542946 +0000 UTC m=+696.631799816 I0915 22:18:05.571495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-15 22:18:05.571485144 +0000 UTC m=+696.648742004 I0915 22:18:05.595761 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:18:05.595748885 +0000 UTC m=+696.673005735 I0915 22:18:05.611245 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:18:05.623739 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:18:51.798047 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-15 22:18:51.798027009 +0000 UTC m=+742.875283909 I0915 22:18:51.798580 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:18:51.798643 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-15 22:18:51.798636671 +0000 UTC m=+742.875893541 I0915 22:18:51.813663 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:18:51.813972 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 22:18:51.814023 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-15 22:18:51.814007914 +0000 UTC m=+742.891264814 I0915 22:18:52.118619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-15 22:18:52.118606135 +0000 UTC m=+743.195862995 I0915 22:18:52.139379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-15 22:18:52.139368666 +0000 UTC m=+743.216625526 I0915 22:18:52.181960 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:18:52.181947708 +0000 UTC m=+743.259204568 I0915 22:18:52.200423 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 22:18:52.200943 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 22:18:52.200937214 +0000 UTC m=+743.278194074 I0915 22:18:52.215165 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"