I0916 21:36:50.553147 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0916 21:36:50.553309 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0916 21:36:50.556620 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0916 21:36:50.556639 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0916 21:36:50.556648 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0916 21:36:50.557102 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0916 21:36:50.557128 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0916 21:36:50.557231 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0916 21:36:50.562254 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0916 21:36:50.583015 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0916 21:36:50.583349 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0916 21:36:50.589119 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0916 21:36:50.589228 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0916 21:36:50.597626 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0916 21:36:50.605102 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0916 21:36:50.612982 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0916 21:36:50.613590 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0916 21:36:50.615958 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0916 21:36:50.615982 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0916 21:36:50.616005 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0916 21:36:50.619094 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0916 21:36:50.619112 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0916 21:36:50.619214 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0916 21:36:50.622510 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0916 21:36:50.629228 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0916 21:36:50.633248 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0916 21:36:50.637350 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0916 21:36:50.641378 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0916 21:36:50.645633 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0916 21:36:50.649791 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0916 21:36:50.653108 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0916 21:36:50.657925 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0916 21:36:50.662588 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0916 21:36:50.666393 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0916 21:36:50.669321 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.669713 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.670089 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.669325 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.672496 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.691906 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.711022 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.728214 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.780459 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.803849 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:36:50.830919 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0916 21:37:03.897889 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-16 21:37:03.897867357 +0000 UTC m=+13.376023883 I0916 21:37:04.599476 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-16 21:37:04.599465129 +0000 UTC m=+14.077621625 I0916 21:37:04.599609 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:37:04.599676 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-16 21:37:04.599659564 +0000 UTC m=+14.077816110 E0916 21:37:04.618906 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0916 21:37:04.619022 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-16 21:37:04.619009264 +0000 UTC m=+14.097165780 E0916 21:37:04.619058 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0916 21:37:04.619999 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:37:04.620224 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:37:04.620269 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-16 21:37:04.620259354 +0000 UTC m=+14.098415880 E0916 21:37:04.631024 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0916 21:37:04.631383 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0916 21:37:04.631489 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0916 21:37:04.631654 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0916 21:37:04.663070 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:37:04.685018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-16 21:37:04.685005117 +0000 UTC m=+14.163161643 I0916 21:37:04.725250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-16 21:37:04.725236595 +0000 UTC m=+14.203393091 I0916 21:37:04.757807 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:37:04.757789815 +0000 UTC m=+14.235946331 I0916 21:37:04.777753 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:37:04.778389 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:37:04.778361775 +0000 UTC m=+14.256518301 I0916 21:37:04.799478 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:37:09.632717 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:37:09.632699773 +0000 UTC m=+19.110856289 I0916 21:37:35.220573 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:37:35.220618 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-16 21:37:35.220585786 +0000 UTC m=+44.698742312 I0916 21:37:35.220648 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-16 21:37:35.220639997 +0000 UTC m=+44.698796523 I0916 21:37:35.229988 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-16 21:37:35.229978311 +0000 UTC m=+44.708134827 I0916 21:37:35.237276 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:37:35.238267 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-16 21:37:35.23825652 +0000 UTC m=+44.716413026 I0916 21:37:35.568578 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:37:35.600768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-16 21:37:35.600757858 +0000 UTC m=+45.078914354 I0916 21:37:35.635146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-16 21:37:35.635136263 +0000 UTC m=+45.113292759 I0916 21:37:35.667196 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:37:35.667184507 +0000 UTC m=+45.145341003 I0916 21:37:35.688855 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:42:24.466636 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-66.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:42:24.466699 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-66.nip.io-tls" condition "Ready" to 2026-09-16 21:42:24.466636377 +0000 UTC m=+333.944792933 I0916 21:42:24.466878 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-66.nip.io-tls" condition "Issuing" to 2026-09-16 21:42:24.466814121 +0000 UTC m=+333.944970697 I0916 21:42:24.482408 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:42:24.482502 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-66.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:42:24.482530 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-66.nip.io-tls" condition "Issuing" to 2026-09-16 21:42:24.482520577 +0000 UTC m=+333.960677103 I0916 21:42:24.825238 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:42:24.841577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-66.nip.io-tls-1" condition "Approved" to 2026-09-16 21:42:24.841544982 +0000 UTC m=+334.319701488 I0916 21:42:24.860112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-66.nip.io-tls-1" condition "Ready" to 2026-09-16 21:42:24.86009472 +0000 UTC m=+334.338251236 I0916 21:42:24.890204 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-66.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:42:24.890178162 +0000 UTC m=+334.368334648 I0916 21:42:24.910771 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:43:32.271270 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-16 21:43:32.27121514 +0000 UTC m=+401.749371666 I0916 21:43:32.271680 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:43:32.271765 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-16 21:43:32.271755313 +0000 UTC m=+401.749911829 E0916 21:43:32.280087 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0916 21:43:32.280175 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-16 21:43:32.280164478 +0000 UTC m=+401.758320994 E0916 21:43:32.280202 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0916 21:43:32.288611 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:43:32.288872 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:43:32.288944 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-16 21:43:32.288930751 +0000 UTC m=+401.767087267 E0916 21:43:32.293477 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0916 21:43:32.293580 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0916 21:43:32.293617 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0916 21:43:32.293661 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0916 21:43:32.343131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-16 21:43:32.343120237 +0000 UTC m=+401.821276733 I0916 21:43:32.358750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-16 21:43:32.35874079 +0000 UTC m=+401.836897286 I0916 21:43:32.381234 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:43:32.381220812 +0000 UTC m=+401.859377308 I0916 21:43:32.394220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:43:32.394675 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:43:32.394667452 +0000 UTC m=+401.872823958 I0916 21:43:32.408740 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:43:37.294389 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:43:37.294377042 +0000 UTC m=+406.772533558 I0916 21:44:17.975750 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-16 21:44:17.97569409 +0000 UTC m=+447.453850576 I0916 21:44:17.976144 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:44:17.976175 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-16 21:44:17.976168322 +0000 UTC m=+447.454324798 I0916 21:44:17.983130 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-16 21:44:17.983124257 +0000 UTC m=+447.461280733 I0916 21:44:17.983325 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:44:17.983345 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-16 21:44:17.983342952 +0000 UTC m=+447.461499438 I0916 21:44:17.985938 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:44:17.986903 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-16 21:44:17.986896966 +0000 UTC m=+447.465053472 I0916 21:44:17.987083 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-16 21:44:17.98707981 +0000 UTC m=+447.465236286 I0916 21:44:17.998376 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:17.999647 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:44:17.999852 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-16 21:44:17.999844983 +0000 UTC m=+447.478001469 I0916 21:44:18.007126 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:18.007164 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:44:18.007184 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-16 21:44:18.007174437 +0000 UTC m=+447.485330923 I0916 21:44:18.015788 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:18.015896 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-16 21:44:18.015885963 +0000 UTC m=+447.494042449 I0916 21:44:18.171734 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:18.213508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-16 21:44:18.213494528 +0000 UTC m=+447.691651024 I0916 21:44:18.226180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-16 21:44:18.226172119 +0000 UTC m=+447.704328605 I0916 21:44:18.246062 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:44:18.24605055 +0000 UTC m=+447.724207036 I0916 21:44:18.267434 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:18.283774 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:18.309580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-16 21:44:18.309571166 +0000 UTC m=+447.787727642 I0916 21:44:18.318826 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:18.323494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-16 21:44:18.323482906 +0000 UTC m=+447.801639382 I0916 21:44:18.327565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-16 21:44:18.327559062 +0000 UTC m=+447.805715548 I0916 21:44:18.482349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-16 21:44:18.482339701 +0000 UTC m=+447.960496197 I0916 21:44:19.023077 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:44:19.02306289 +0000 UTC m=+448.501219406 I0916 21:44:19.070644 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:44:19.070625818 +0000 UTC m=+448.548782334 I0916 21:44:19.214487 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:19.214945 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:44:19.21493757 +0000 UTC m=+448.693094056 I0916 21:44:19.320496 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:19.321590 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:44:19.321576299 +0000 UTC m=+448.799732825 I0916 21:44:19.627136 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:19.716668 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:27.060298 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" condition "Ready" to 2026-09-16 21:44:27.060283505 +0000 UTC m=+456.538440001 I0916 21:44:27.060355 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:44:27.060376 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" condition "Issuing" to 2026-09-16 21:44:27.060371807 +0000 UTC m=+456.538528293 I0916 21:44:27.069122 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:27.069183 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" condition "Ready" to 2026-09-16 21:44:27.069177017 +0000 UTC m=+456.547333503 I0916 21:44:27.166142 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:27.199079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls-1" condition "Approved" to 2026-09-16 21:44:27.199069557 +0000 UTC m=+456.677226043 I0916 21:44:27.219714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls-1" condition "Ready" to 2026-09-16 21:44:27.219706418 +0000 UTC m=+456.697862904 I0916 21:44:27.240270 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:44:27.240261887 +0000 UTC m=+456.718418363 I0916 21:44:27.255387 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:27.255715 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:44:27.255708454 +0000 UTC m=+456.733864940 I0916 21:44:27.260008 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:27.269235 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pqdt2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:40.472956 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:44:40.472983 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-16 21:44:40.47297583 +0000 UTC m=+469.951132316 I0916 21:44:40.473228 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-16 21:44:40.473224765 +0000 UTC m=+469.951381251 I0916 21:44:40.492977 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:40.493039 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-16 21:44:40.493031909 +0000 UTC m=+469.971188385 I0916 21:44:40.588332 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:44:40.620257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-16 21:44:40.620245909 +0000 UTC m=+470.098402395 I0916 21:44:40.639054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-16 21:44:40.639044308 +0000 UTC m=+470.117200804 I0916 21:44:40.662453 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:44:40.662443797 +0000 UTC m=+470.140600283 I0916 21:44:40.675029 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:08.894524 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:48:08.894571 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-16 21:48:08.894559495 +0000 UTC m=+678.372716011 I0916 21:48:08.894756 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-16 21:48:08.894739878 +0000 UTC m=+678.372896394 I0916 21:48:08.907525 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:08.907604 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-16 21:48:08.907595414 +0000 UTC m=+678.385751940 I0916 21:48:09.070624 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:09.109385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-16 21:48:09.109373242 +0000 UTC m=+678.587529748 I0916 21:48:09.124150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-16 21:48:09.12414189 +0000 UTC m=+678.602298376 I0916 21:48:09.152210 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:48:09.152200762 +0000 UTC m=+678.630357258 I0916 21:48:09.167845 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:09.168493 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:48:09.168486485 +0000 UTC m=+678.646642981 I0916 21:48:09.176557 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:09.180516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:09.181155 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:48:09.181146537 +0000 UTC m=+678.659303023 I0916 21:48:51.158627 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-16 21:48:51.158562397 +0000 UTC m=+720.636718923 I0916 21:48:51.159237 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:48:51.159326 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-16 21:48:51.15931687 +0000 UTC m=+720.637473386 I0916 21:48:51.182954 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:51.183037 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0916 21:48:51.183061 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-16 21:48:51.183051545 +0000 UTC m=+720.661208061 I0916 21:48:51.398442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-16 21:48:51.398425587 +0000 UTC m=+720.876582113 I0916 21:48:51.416623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-16 21:48:51.416615833 +0000 UTC m=+720.894772319 I0916 21:48:51.445198 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:48:51.445188733 +0000 UTC m=+720.923345219 I0916 21:48:51.459924 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:51.460524 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-16 21:48:51.460517288 +0000 UTC m=+720.938673774 I0916 21:48:51.467279 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0916 21:48:51.479173 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"