I0824 15:23:37.809384 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0824 15:23:37.809933 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0824 15:23:37.814162 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0824 15:23:37.814184 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0824 15:23:37.814193 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0824 15:23:37.814793 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0824 15:23:37.814912 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0824 15:23:37.814937 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0824 15:23:37.821851 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0824 15:23:37.838009 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0824 15:23:37.843643 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0824 15:23:37.848495 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0824 15:23:37.848567 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0824 15:23:37.851543 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0824 15:23:37.854173 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0824 15:23:37.857138 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0824 15:23:37.862328 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0824 15:23:37.862531 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0824 15:23:37.864909 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0824 15:23:37.867236 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0824 15:23:37.869502 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0824 15:23:37.871713 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0824 15:23:37.873884 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0824 15:23:37.877182 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0824 15:23:37.877997 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0824 15:23:37.881953 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0824 15:23:37.882012 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0824 15:23:37.885600 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0824 15:23:37.888744 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0824 15:23:37.891765 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0824 15:23:37.891785 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0824 15:23:37.891908 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0824 15:23:37.894062 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0824 15:23:37.896666 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0824 15:23:37.898631 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.899588 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.899713 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.900038 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.900243 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.914143 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.934844 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.952048 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.964784 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:37.983819 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:38.001862 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0824 15:23:51.364817 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-24 15:23:51.364767975 +0000 UTC m=+13.583759320 I0824 15:23:52.081734 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:23:52.081726 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-24 15:23:52.081714291 +0000 UTC m=+14.300705616 I0824 15:23:52.081771 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-24 15:23:52.081765743 +0000 UTC m=+14.300757058 I0824 15:23:52.098461 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:23:52.098550 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-24 15:23:52.098538456 +0000 UTC m=+14.317529781 E0824 15:23:52.098756 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 15:23:52.098824 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-24 15:23:52.098815909 +0000 UTC m=+14.317807214 E0824 15:23:52.098850 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 15:23:52.114191 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0824 15:23:52.114448 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0824 15:23:52.114783 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:23:52.114831 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:23:52.114881 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0824 15:23:52.118391 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:23:52.144451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-24 15:23:52.14443787 +0000 UTC m=+14.363429205 I0824 15:23:52.178202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-24 15:23:52.178190046 +0000 UTC m=+14.397181381 I0824 15:23:52.206125 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:23:52.206113509 +0000 UTC m=+14.425104814 I0824 15:23:52.219654 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:23:57.115151 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:23:57.115137184 +0000 UTC m=+19.334128529 I0824 15:24:22.053306 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:24:22.053331 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-24 15:24:22.05328181 +0000 UTC m=+44.272273145 I0824 15:24:22.053400 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-24 15:24:22.053392306 +0000 UTC m=+44.272383611 I0824 15:24:22.084844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:24:22.084921 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-24 15:24:22.084905274 +0000 UTC m=+44.303896589 I0824 15:24:22.085227 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-24 15:24:22.085221519 +0000 UTC m=+44.304212834 I0824 15:24:22.292441 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:24:22.318919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-24 15:24:22.318908492 +0000 UTC m=+44.537899797 I0824 15:24:22.349576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-24 15:24:22.349563628 +0000 UTC m=+44.568554933 I0824 15:24:22.378803 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:24:22.378792192 +0000 UTC m=+44.597783507 I0824 15:24:22.395158 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:24:22.395674 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:24:22.395666856 +0000 UTC m=+44.614658171 I0824 15:24:22.439180 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:24:22.468396 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:29:41.646126 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-237.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:29:41.646245 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Issuing" to 2026-08-24 15:29:41.646199394 +0000 UTC m=+363.865190729 I0824 15:29:41.646244 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready" to 2026-08-24 15:29:41.646216725 +0000 UTC m=+363.865208030 I0824 15:29:41.667589 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:29:41.667670 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-237.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:29:41.667687 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Issuing" to 2026-08-24 15:29:41.667680047 +0000 UTC m=+363.886671352 I0824 15:29:41.966829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-237.nip.io-tls-1" condition "Approved" to 2026-08-24 15:29:41.966814742 +0000 UTC m=+364.185806077 I0824 15:29:41.999939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-237.nip.io-tls-1" condition "Ready" to 2026-08-24 15:29:41.999928405 +0000 UTC m=+364.218919720 I0824 15:29:42.021756 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:29:42.021740841 +0000 UTC m=+364.240732186 I0824 15:29:42.036909 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:29:42.037984 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-237.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:29:42.037976226 +0000 UTC m=+364.256967541 I0824 15:29:42.047435 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:29:42.052054 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-237.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-237.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:30:49.558869 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:30:49.559285 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-24 15:30:49.55872044 +0000 UTC m=+431.777711745 I0824 15:30:49.559733 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-24 15:30:49.558967221 +0000 UTC m=+431.777958566 I0824 15:30:49.747527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:30:49.747656 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-24 15:30:49.74764813 +0000 UTC m=+431.966639425 E0824 15:30:50.196106 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0824 15:30:50.196178 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-24 15:30:50.196169647 +0000 UTC m=+432.415160952 E0824 15:30:50.196198 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:30:50.435675 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0824 15:30:50.435687 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0824 15:30:50.435746 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:30:50.435769 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0824 15:30:50.435797 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0824 15:30:50.571084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-24 15:30:50.571073165 +0000 UTC m=+432.790064500 I0824 15:30:50.590520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-24 15:30:50.590510074 +0000 UTC m=+432.809501369 I0824 15:30:50.617907 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:30:50.617892274 +0000 UTC m=+432.836883589 I0824 15:30:50.635087 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:30:50.636646 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:30:50.636636564 +0000 UTC m=+432.855627879 I0824 15:30:50.672370 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:30:55.436781 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:30:55.436753214 +0000 UTC m=+437.655744549 I0824 15:31:46.971012 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:31:46.971116 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-24 15:31:46.971080188 +0000 UTC m=+489.190071503 I0824 15:31:46.971265 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-24 15:31:46.971249566 +0000 UTC m=+489.190240891 I0824 15:31:46.998186 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-24 15:31:46.998174173 +0000 UTC m=+489.217165478 I0824 15:31:46.998227 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:31:46.998248 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-24 15:31:46.998244356 +0000 UTC m=+489.217235661 I0824 15:31:46.998279 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:31:46.998316 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-24 15:31:46.998307228 +0000 UTC m=+489.217298533 I0824 15:31:46.998516 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-24 15:31:46.998512327 +0000 UTC m=+489.217503632 I0824 15:31:47.029104 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:47.029169 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:47.029378 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:47.031967 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-24 15:31:47.031952042 +0000 UTC m=+489.250943347 I0824 15:31:47.032513 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:31:47.032553 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-24 15:31:47.032548257 +0000 UTC m=+489.251539572 I0824 15:31:47.035622 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:31:47.035658 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-24 15:31:47.03565121 +0000 UTC m=+489.254642515 I0824 15:31:47.727476 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:47.732875 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:47.758976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-24 15:31:47.758941095 +0000 UTC m=+489.977932410 I0824 15:31:47.768986 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:47.786992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-24 15:31:47.786981019 +0000 UTC m=+490.005972324 I0824 15:31:47.788910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-24 15:31:47.788887841 +0000 UTC m=+490.007879146 I0824 15:31:47.789831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-24 15:31:47.789824951 +0000 UTC m=+490.008816266 I0824 15:31:47.818758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-24 15:31:47.818740433 +0000 UTC m=+490.037731748 I0824 15:31:47.821519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-24 15:31:47.821508571 +0000 UTC m=+490.040499886 I0824 15:31:47.856553 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:31:47.856539674 +0000 UTC m=+490.075530979 I0824 15:31:47.873219 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:31:47.873210605 +0000 UTC m=+490.092201900 I0824 15:31:47.879881 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:47.894131 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:31:47.894120986 +0000 UTC m=+490.113112291 I0824 15:31:47.987457 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:47.987976 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:31:47.987970045 +0000 UTC m=+490.206961360 I0824 15:31:48.536212 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:48.569028 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:31:48.901290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:32:01.917369 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:32:01.917450 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" condition "Issuing" to 2026-08-24 15:32:01.917398933 +0000 UTC m=+504.136390238 I0824 15:32:01.917596 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" condition "Ready" to 2026-08-24 15:32:01.91756496 +0000 UTC m=+504.136556265 I0824 15:32:01.931066 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g47cc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:32:01.931136 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:32:01.931159 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" condition "Issuing" to 2026-08-24 15:32:01.931148452 +0000 UTC m=+504.150139767 I0824 15:32:02.322842 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g47cc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:32:02.331478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g47cc-tls-1" condition "Approved" to 2026-08-24 15:32:02.331437718 +0000 UTC m=+504.550429013 I0824 15:32:02.378350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g47cc-tls-1" condition "Ready" to 2026-08-24 15:32:02.378340386 +0000 UTC m=+504.597331691 I0824 15:32:02.413112 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:32:02.413100304 +0000 UTC m=+504.632091609 I0824 15:32:02.601015 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g47cc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:32:02.601823 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:32:02.601813343 +0000 UTC m=+504.820804658 I0824 15:32:02.705685 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g47cc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g47cc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:32:17.265548 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-24 15:32:17.265533711 +0000 UTC m=+519.484525016 I0824 15:32:17.265955 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:32:17.265986 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-24 15:32:17.26597976 +0000 UTC m=+519.484971065 I0824 15:32:17.275426 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:32:17.275537 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:32:17.275559 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-24 15:32:17.275553802 +0000 UTC m=+519.494545107 I0824 15:32:17.702816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-24 15:32:17.702806617 +0000 UTC m=+519.921797922 I0824 15:32:17.737208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-24 15:32:17.737197035 +0000 UTC m=+519.956188340 I0824 15:32:17.772786 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:32:17.772775875 +0000 UTC m=+519.991767180 I0824 15:32:17.784126 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:32:17.784632 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:32:17.784623554 +0000 UTC m=+520.003614859 I0824 15:32:17.794974 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:32:17.807479 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:35:41.523779 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-24 15:35:41.523761338 +0000 UTC m=+723.742752673 I0824 15:35:41.524030 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:35:41.524055 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-24 15:35:41.524049924 +0000 UTC m=+723.743041239 I0824 15:35:41.542546 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:35:41.542655 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:35:41.542677 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-24 15:35:41.542669483 +0000 UTC m=+723.761660798 I0824 15:35:41.854140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-24 15:35:41.854117141 +0000 UTC m=+724.073108456 I0824 15:35:41.888763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-24 15:35:41.888747973 +0000 UTC m=+724.107739318 I0824 15:35:41.925435 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:35:41.925389718 +0000 UTC m=+724.144381023 I0824 15:35:41.944356 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:36:30.184926 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:36:30.184958 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-24 15:36:30.18493113 +0000 UTC m=+772.403922475 I0824 15:36:30.185042 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-24 15:36:30.185031912 +0000 UTC m=+772.404023227 I0824 15:36:30.205270 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:36:30.205625 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0824 15:36:30.205684 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-24 15:36:30.205676372 +0000 UTC m=+772.424667687 I0824 15:36:30.575238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-24 15:36:30.575215062 +0000 UTC m=+772.794206397 I0824 15:36:30.596082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-24 15:36:30.596067756 +0000 UTC m=+772.815059071 I0824 15:36:30.623831 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:36:30.623810788 +0000 UTC m=+772.842802103 I0824 15:36:30.641086 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:36:30.641495 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-24 15:36:30.641487515 +0000 UTC m=+772.860478820 I0824 15:36:30.647297 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:36:30.658081 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0824 15:36:30.680215 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"