I0915 02:20:06.799512 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0915 02:20:06.799833 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0915 02:20:06.804829 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0915 02:20:06.804921 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0915 02:20:06.804968 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0915 02:20:06.805396 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0915 02:20:06.805427 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0915 02:20:06.805515 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0915 02:20:06.811729 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0915 02:20:06.825353 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0915 02:20:06.825716 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0915 02:20:06.825760 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0915 02:20:06.825793 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0915 02:20:06.832730 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0915 02:20:06.839294 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0915 02:20:06.843623 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0915 02:20:06.847783 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0915 02:20:06.851923 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0915 02:20:06.855974 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0915 02:20:06.862708 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0915 02:20:06.866423 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0915 02:20:06.870053 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0915 02:20:06.870083 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0915 02:20:06.870178 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0915 02:20:06.874329 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0915 02:20:06.878460 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0915 02:20:06.882234 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0915 02:20:06.886156 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0915 02:20:06.891220 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0915 02:20:06.891657 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0915 02:20:06.896056 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0915 02:20:06.901727 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0915 02:20:06.907601 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0915 02:20:06.912717 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0915 02:20:06.916056 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:06.916813 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:06.918136 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:06.918401 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:06.918585 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:06.918930 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:06.940693 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:06.956749 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:06.983154 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:07.002065 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:07.026983 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0915 02:20:17.421438 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-15 02:20:17.421412896 +0000 UTC m=+10.663707749 I0915 02:20:18.229766 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:20:18.229906 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-15 02:20:18.229898608 +0000 UTC m=+11.472193411 I0915 02:20:18.230228 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 02:20:18.230175676 +0000 UTC m=+11.472470539 I0915 02:20:18.250253 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:20:18.250376 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 02:20:18.250364305 +0000 UTC m=+11.492659148 E0915 02:20:18.251014 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 02:20:18.251379 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-15 02:20:18.25117515 +0000 UTC m=+11.493470003 E0915 02:20:18.251427 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 02:20:18.273929 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0915 02:20:18.274375 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 02:20:18.274416 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 02:20:18.274544 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0915 02:20:18.276026 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:20:18.276108 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-15 02:20:18.276096997 +0000 UTC m=+11.518391840 I0915 02:20:18.276649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:20:18.306067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-15 02:20:18.306048431 +0000 UTC m=+11.548343314 E0915 02:20:18.323458 1 controller.go:162] "re-queuing item due to error processing" err="certificaterequests.cert-manager.io \"self-signed-ca-1\" already exists" logger="cert-manager.controller" key="cert-manager/self-signed-ca" I0915 02:20:18.343352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-15 02:20:18.343335913 +0000 UTC m=+11.585630766 I0915 02:20:18.376464 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:20:18.376450595 +0000 UTC m=+11.618745418 I0915 02:20:18.387080 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:20:18.387828 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:20:18.387815819 +0000 UTC m=+11.630110652 I0915 02:20:18.408390 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:20:23.274953 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:20:23.274938395 +0000 UTC m=+16.517233258 I0915 02:20:47.857048 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-15 02:20:47.857027835 +0000 UTC m=+41.099322688 I0915 02:20:47.857601 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:20:47.857680 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-15 02:20:47.857673321 +0000 UTC m=+41.099968164 I0915 02:20:47.878926 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-15 02:20:47.878878918 +0000 UTC m=+41.121173771 I0915 02:20:47.879567 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:20:47.883612 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-15 02:20:47.883590328 +0000 UTC m=+41.125885171 I0915 02:20:48.078117 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:20:48.114213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-15 02:20:48.114201456 +0000 UTC m=+41.356496299 I0915 02:20:48.188623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-15 02:20:48.188607082 +0000 UTC m=+41.430901935 I0915 02:20:48.256885 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:20:48.256870451 +0000 UTC m=+41.499165274 I0915 02:20:48.312196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:25:36.563318 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready" to 2026-09-15 02:25:36.56326345 +0000 UTC m=+329.805558303 I0915 02:25:36.563485 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:25:36.563554 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Issuing" to 2026-09-15 02:25:36.563541185 +0000 UTC m=+329.805836038 I0915 02:25:36.578680 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:25:36.578796 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:25:36.578845 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Issuing" to 2026-09-15 02:25:36.578836011 +0000 UTC m=+329.821130854 I0915 02:25:36.726963 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:25:36.747408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-59.nip.io-tls-1" condition "Approved" to 2026-09-15 02:25:36.74739414 +0000 UTC m=+329.989688983 I0915 02:25:36.767160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-59.nip.io-tls-1" condition "Ready" to 2026-09-15 02:25:36.767150976 +0000 UTC m=+330.009445799 I0915 02:25:36.800546 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:25:36.800530515 +0000 UTC m=+330.042825358 I0915 02:25:36.815384 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:26:44.232710 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-15 02:26:44.232675853 +0000 UTC m=+397.474970666 I0915 02:26:44.233092 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:26:44.233124 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 02:26:44.233120061 +0000 UTC m=+397.475414874 E0915 02:26:44.242850 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 02:26:44.243158 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-15 02:26:44.243152057 +0000 UTC m=+397.485446870 E0915 02:26:44.243328 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0915 02:26:44.243121 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:26:44.243481 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:26:44.243505 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-15 02:26:44.243500823 +0000 UTC m=+397.485795636 E0915 02:26:44.257131 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0915 02:26:44.257972 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 02:26:44.258067 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0915 02:26:44.258120 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0915 02:26:44.287659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-15 02:26:44.287645636 +0000 UTC m=+397.529940489 I0915 02:26:44.305983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-15 02:26:44.305970487 +0000 UTC m=+397.548265310 I0915 02:26:44.334509 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:26:44.334496098 +0000 UTC m=+397.576790941 I0915 02:26:44.350108 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:26:44.351446 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:26:44.351436463 +0000 UTC m=+397.593731316 I0915 02:26:44.364930 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:26:49.258564 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:26:49.258539493 +0000 UTC m=+402.500834336 I0915 02:27:30.402897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-15 02:27:30.402887209 +0000 UTC m=+443.645182012 I0915 02:27:30.403487 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:30.403502 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-15 02:27:30.40349941 +0000 UTC m=+443.645794223 I0915 02:27:30.408525 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:30.408569 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-15 02:27:30.408556361 +0000 UTC m=+443.650851204 I0915 02:27:30.409166 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-15 02:27:30.409161382 +0000 UTC m=+443.651456185 I0915 02:27:30.409561 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:30.409583 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-15 02:27:30.409580299 +0000 UTC m=+443.651875112 I0915 02:27:30.409910 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-15 02:27:30.409892995 +0000 UTC m=+443.652187808 I0915 02:27:30.431390 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:30.431582 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:30.431681 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-15 02:27:30.431605016 +0000 UTC m=+443.673899839 I0915 02:27:30.452368 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:30.452432 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:30.452453 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-15 02:27:30.452447132 +0000 UTC m=+443.694741945 I0915 02:27:30.452619 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:30.460143 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-15 02:27:30.460137109 +0000 UTC m=+443.702431922 I0915 02:27:30.543070 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:30.556182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-15 02:27:30.556169189 +0000 UTC m=+443.798463992 I0915 02:27:30.573597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-15 02:27:30.573586182 +0000 UTC m=+443.815880995 I0915 02:27:30.602168 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:27:30.602157956 +0000 UTC m=+443.844452769 I0915 02:27:30.622036 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:30.623216 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:27:30.623209725 +0000 UTC m=+443.865504538 I0915 02:27:30.627353 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:30.635691 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:30.639220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:30.728340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-15 02:27:30.728326697 +0000 UTC m=+443.970621510 I0915 02:27:30.749718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-15 02:27:30.749706993 +0000 UTC m=+443.992001816 I0915 02:27:30.843219 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:27:30.843209585 +0000 UTC m=+444.085504388 I0915 02:27:30.940807 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:31.241835 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:31.439966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:31.498115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-15 02:27:31.498086478 +0000 UTC m=+444.740381301 I0915 02:27:31.556743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-15 02:27:31.556734703 +0000 UTC m=+444.799029526 I0915 02:27:32.047378 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:27:32.047361879 +0000 UTC m=+445.289656732 I0915 02:27:32.140673 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:32.141378 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:27:32.141370169 +0000 UTC m=+445.383665022 I0915 02:27:32.394041 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:32.438863 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:38.710535 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" condition "Ready" to 2026-09-15 02:27:38.71049103 +0000 UTC m=+451.952785883 I0915 02:27:38.711014 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:38.711036 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" condition "Issuing" to 2026-09-15 02:27:38.711029649 +0000 UTC m=+451.953324502 I0915 02:27:38.742100 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:38.742258 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:38.742305 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" condition "Issuing" to 2026-09-15 02:27:38.742296669 +0000 UTC m=+451.984591512 I0915 02:27:38.907963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls-1" condition "Approved" to 2026-09-15 02:27:38.907935826 +0000 UTC m=+452.150230649 I0915 02:27:38.922663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls-1" condition "Ready" to 2026-09-15 02:27:38.9226527 +0000 UTC m=+452.164947503 I0915 02:27:38.941605 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:27:38.94159462 +0000 UTC m=+452.183889433 I0915 02:27:38.954363 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:38.955121 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:27:38.955112932 +0000 UTC m=+452.197407735 I0915 02:27:38.965345 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:38.971546 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8g2ms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:52.247005 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:52.247045 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-15 02:27:52.247039413 +0000 UTC m=+465.489334226 I0915 02:27:52.247061 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-15 02:27:52.247031353 +0000 UTC m=+465.489326166 I0915 02:27:52.266476 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:52.266755 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:27:52.266807 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-15 02:27:52.266798965 +0000 UTC m=+465.509093778 I0915 02:27:52.461285 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:27:52.475369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-15 02:27:52.475358742 +0000 UTC m=+465.717653565 I0915 02:27:52.490718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-15 02:27:52.490706865 +0000 UTC m=+465.733001678 I0915 02:27:52.514398 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:27:52.514372705 +0000 UTC m=+465.756667518 I0915 02:27:52.532323 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:10.026776 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:31:10.026930 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-15 02:31:10.026916352 +0000 UTC m=+663.269211205 I0915 02:31:10.027260 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 02:31:10.027238487 +0000 UTC m=+663.269533330 I0915 02:31:10.047675 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:10.047738 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-15 02:31:10.047730303 +0000 UTC m=+663.290025126 I0915 02:31:10.273060 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:10.327626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-15 02:31:10.327613685 +0000 UTC m=+663.569908538 I0915 02:31:10.342946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-15 02:31:10.342934504 +0000 UTC m=+663.585229327 I0915 02:31:10.368157 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:31:10.368149069 +0000 UTC m=+663.610443892 I0915 02:31:10.382056 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:10.382944 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:31:10.382933717 +0000 UTC m=+663.625228530 I0915 02:31:10.401668 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:10.401753 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:10.415925 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:54.391683 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-15 02:31:54.391668776 +0000 UTC m=+707.633963629 I0915 02:31:54.392496 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0915 02:31:54.392549 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-15 02:31:54.392543233 +0000 UTC m=+707.634838076 I0915 02:31:54.413074 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:54.413749 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-15 02:31:54.413737732 +0000 UTC m=+707.656032575 I0915 02:31:54.605227 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:54.646474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-15 02:31:54.646450178 +0000 UTC m=+707.888745051 I0915 02:31:54.672104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-15 02:31:54.672087415 +0000 UTC m=+707.914382258 I0915 02:31:54.700734 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:31:54.700722614 +0000 UTC m=+707.943017437 I0915 02:31:54.713756 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0915 02:31:54.714239 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-15 02:31:54.714233255 +0000 UTC m=+707.956528058 I0915 02:31:54.728775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"