I0805 07:27:09.041247 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0805 07:27:09.041427 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0805 07:27:09.046215 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0805 07:27:09.046250 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0805 07:27:09.046265 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0805 07:27:09.047057 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0805 07:27:09.047525 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0805 07:27:09.047997 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0805 07:27:09.052533 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0805 07:27:09.063564 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0805 07:27:09.070808 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0805 07:27:09.075182 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0805 07:27:09.078619 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0805 07:27:09.080991 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0805 07:27:09.083462 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0805 07:27:09.083489 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0805 07:27:09.083497 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0805 07:27:09.083570 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0805 07:27:09.086376 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0805 07:27:09.093361 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0805 07:27:09.096477 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0805 07:27:09.099653 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0805 07:27:09.101586 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0805 07:27:09.103413 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0805 07:27:09.105077 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0805 07:27:09.105658 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0805 07:27:09.107196 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0805 07:27:09.113921 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0805 07:27:09.113956 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0805 07:27:09.116652 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0805 07:27:09.120426 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0805 07:27:09.125213 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0805 07:27:09.127750 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0805 07:27:09.127835 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0805 07:27:09.129734 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.130061 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.130259 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.131536 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.132156 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.147755 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.164149 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.186493 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.197924 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.215850 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:09.231501 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0805 07:27:22.234635 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-05 07:27:22.234617388 +0000 UTC m=+13.221785982 I0805 07:27:22.890282 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:27:22.890318 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-05 07:27:22.890310073 +0000 UTC m=+13.877478677 I0805 07:27:22.890401 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-05 07:27:22.890381095 +0000 UTC m=+13.877549689 E0805 07:27:22.903316 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0805 07:27:22.903431 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-05 07:27:22.903420727 +0000 UTC m=+13.890589321 E0805 07:27:22.903464 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0805 07:27:22.905030 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:27:22.905127 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-05 07:27:22.905118049 +0000 UTC m=+13.892286653 E0805 07:27:22.918364 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0805 07:27:22.918453 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0805 07:27:22.918478 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0805 07:27:22.918507 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0805 07:27:22.921877 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:27:22.952517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-05 07:27:22.952503681 +0000 UTC m=+13.939672275 I0805 07:27:22.980037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-05 07:27:22.9800288 +0000 UTC m=+13.967197384 I0805 07:27:23.001526 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:27:23.001512463 +0000 UTC m=+13.988681097 I0805 07:27:23.015912 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:27:23.054561 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:27:27.918993 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:27:27.918981165 +0000 UTC m=+18.906149779 I0805 07:27:50.150411 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-05 07:27:50.150365248 +0000 UTC m=+41.137533852 I0805 07:27:50.151021 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:27:50.152956 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-05 07:27:50.15293789 +0000 UTC m=+41.140106494 I0805 07:27:50.164421 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:27:50.164399 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-05 07:27:50.164304392 +0000 UTC m=+41.151472986 I0805 07:27:50.168853 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:27:50.168899 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-05 07:27:50.168890398 +0000 UTC m=+41.156058982 I0805 07:27:50.356687 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:27:50.367357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-05 07:27:50.367334114 +0000 UTC m=+41.354502728 I0805 07:27:50.402784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-05 07:27:50.402769781 +0000 UTC m=+41.389938395 I0805 07:27:50.427425 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:27:50.427410806 +0000 UTC m=+41.414579400 I0805 07:27:50.446868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:27:50.447555 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:27:50.447546347 +0000 UTC m=+41.434714941 I0805 07:27:50.460258 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:27:50.461028 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:27:50.461015375 +0000 UTC m=+41.448183979 I0805 07:32:44.721589 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-5.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:32:44.721820 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-5.nip.io-tls" condition "Issuing" to 2026-08-05 07:32:44.72163422 +0000 UTC m=+335.708802824 I0805 07:32:44.722200 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-5.nip.io-tls" condition "Ready" to 2026-08-05 07:32:44.722184274 +0000 UTC m=+335.709352858 I0805 07:32:44.731400 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:32:44.731696 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-5.nip.io-tls" condition "Ready" to 2026-08-05 07:32:44.731663373 +0000 UTC m=+335.718831967 I0805 07:32:44.944932 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:32:44.974895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-5.nip.io-tls-1" condition "Approved" to 2026-08-05 07:32:44.974866595 +0000 UTC m=+335.962035189 I0805 07:32:44.988213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-5.nip.io-tls-1" condition "Ready" to 2026-08-05 07:32:44.988204802 +0000 UTC m=+335.975373376 I0805 07:32:45.009881 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-5.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:32:45.00987026 +0000 UTC m=+335.997038854 I0805 07:32:45.027196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:33:54.284534 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:33:54.284630 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-05 07:33:54.284605863 +0000 UTC m=+405.271774487 I0805 07:33:54.284552 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-05 07:33:54.284517491 +0000 UTC m=+405.271686085 E0805 07:33:54.296094 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0805 07:33:54.296127 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-05 07:33:54.296120009 +0000 UTC m=+405.283288603 E0805 07:33:54.296162 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0805 07:33:54.297000 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:33:54.297105 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:33:54.297128 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-05 07:33:54.297122927 +0000 UTC m=+405.284291521 E0805 07:33:54.306539 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0805 07:33:54.306657 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0805 07:33:54.306718 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0805 07:33:54.306858 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0805 07:33:54.324854 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:33:54.329665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-05 07:33:54.32965233 +0000 UTC m=+405.316820924 I0805 07:33:54.343124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-05 07:33:54.34311318 +0000 UTC m=+405.330281774 I0805 07:33:54.368079 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:33:54.368062885 +0000 UTC m=+405.355231509 I0805 07:33:54.383283 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:33:54.383869 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:33:54.383861719 +0000 UTC m=+405.371030313 I0805 07:33:54.392553 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:33:54.402308 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:33:54.402777 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:33:54.402768278 +0000 UTC m=+405.389936872 I0805 07:33:59.306949 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:33:59.306935909 +0000 UTC m=+410.294104523 I0805 07:34:41.120938 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-05 07:34:41.120875809 +0000 UTC m=+452.108044393 I0805 07:34:41.121180 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-05 07:34:41.121168257 +0000 UTC m=+452.108336831 I0805 07:34:41.121591 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:34:41.121608 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-05 07:34:41.12160548 +0000 UTC m=+452.108774064 I0805 07:34:41.121978 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-05 07:34:41.12197322 +0000 UTC m=+452.109141804 I0805 07:34:41.122060 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:34:41.122077 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-05 07:34:41.122073943 +0000 UTC m=+452.109242527 I0805 07:34:41.122557 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:34:41.122689 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-05 07:34:41.12265317 +0000 UTC m=+452.109821774 I0805 07:34:41.153159 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:41.156693 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:34:41.156735 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-05 07:34:41.156728367 +0000 UTC m=+452.143896951 I0805 07:34:41.163076 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:41.163159 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-05 07:34:41.163152489 +0000 UTC m=+452.150321093 I0805 07:34:41.168705 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:41.168779 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-05 07:34:41.168773789 +0000 UTC m=+452.155942373 I0805 07:34:41.318623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-05 07:34:41.318609892 +0000 UTC m=+452.305778506 I0805 07:34:41.331070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-05 07:34:41.331061196 +0000 UTC m=+452.318229790 I0805 07:34:41.355108 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:34:41.355078108 +0000 UTC m=+452.342246722 I0805 07:34:41.367672 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:41.595461 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:41.606799 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:41.622378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-05 07:34:41.622367085 +0000 UTC m=+452.609535669 I0805 07:34:41.633795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-05 07:34:41.633782469 +0000 UTC m=+452.620951063 I0805 07:34:41.648950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-05 07:34:41.648928859 +0000 UTC m=+452.636097473 I0805 07:34:41.939334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-05 07:34:41.939322573 +0000 UTC m=+452.926491167 I0805 07:34:42.036769 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:34:42.036753639 +0000 UTC m=+453.023922233 I0805 07:34:42.242342 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:42.285200 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:34:42.285190495 +0000 UTC m=+453.272359069 I0805 07:34:42.640276 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:42.644263 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:34:42.644246774 +0000 UTC m=+453.631415368 I0805 07:34:42.684078 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:42.889415 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:43.036781 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:50.624334 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" condition "Ready" to 2026-08-05 07:34:50.624304167 +0000 UTC m=+461.611472761 I0805 07:34:50.624817 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:34:50.624864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" condition "Issuing" to 2026-08-05 07:34:50.624855803 +0000 UTC m=+461.612024387 I0805 07:34:50.634040 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:50.634168 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:34:50.634397 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" condition "Issuing" to 2026-08-05 07:34:50.634382034 +0000 UTC m=+461.621550718 I0805 07:34:50.754912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls-1" condition "Approved" to 2026-08-05 07:34:50.754893383 +0000 UTC m=+461.742062007 I0805 07:34:50.769813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls-1" condition "Ready" to 2026-08-05 07:34:50.769800968 +0000 UTC m=+461.756969562 I0805 07:34:50.792177 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:34:50.792165576 +0000 UTC m=+461.779334170 I0805 07:34:50.806272 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:34:50.818252 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5s7g2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:35:08.767220 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:35:08.767273 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-05 07:35:08.767257908 +0000 UTC m=+479.754426522 I0805 07:35:08.767833 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-05 07:35:08.767823925 +0000 UTC m=+479.754992539 I0805 07:35:08.781894 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:35:08.782001 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:35:08.782048 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-05 07:35:08.782038194 +0000 UTC m=+479.769206788 I0805 07:35:08.992824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-05 07:35:08.992807901 +0000 UTC m=+479.979976495 I0805 07:35:09.008724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-05 07:35:09.008712969 +0000 UTC m=+479.995881563 I0805 07:35:09.038406 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:35:09.038391653 +0000 UTC m=+480.025560257 I0805 07:35:09.053535 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:35:09.054367 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:35:09.054360803 +0000 UTC m=+480.041529387 I0805 07:35:09.152137 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:35:09.153201 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:35:09.153195379 +0000 UTC m=+480.140363963 I0805 07:38:31.006220 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-05 07:38:31.006205969 +0000 UTC m=+681.993374553 I0805 07:38:31.006475 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:38:31.006580 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-05 07:38:31.006547916 +0000 UTC m=+681.993716530 I0805 07:38:31.018555 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:38:31.018647 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:38:31.018672 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-05 07:38:31.018663038 +0000 UTC m=+682.005831622 I0805 07:38:31.463028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-05 07:38:31.463015506 +0000 UTC m=+682.450184100 I0805 07:38:31.481495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-05 07:38:31.481483505 +0000 UTC m=+682.468652109 I0805 07:38:31.506103 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:38:31.506090368 +0000 UTC m=+682.493258962 I0805 07:38:31.518414 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:38:31.518921 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:38:31.518914023 +0000 UTC m=+682.506082607 I0805 07:38:31.524814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:38:31.532994 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:39:16.361568 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0805 07:39:16.361601 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-05 07:39:16.361585882 +0000 UTC m=+727.348754486 I0805 07:39:16.361628 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-05 07:39:16.361620313 +0000 UTC m=+727.348788917 I0805 07:39:16.373218 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:39:16.374068 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-05 07:39:16.374053563 +0000 UTC m=+727.361222167 I0805 07:39:16.473847 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:39:16.505649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-05 07:39:16.505638316 +0000 UTC m=+727.492806920 I0805 07:39:16.520902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-05 07:39:16.520888533 +0000 UTC m=+727.508057137 I0805 07:39:16.543424 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:39:16.543412495 +0000 UTC m=+727.530581089 I0805 07:39:16.559407 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:39:16.559958 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-05 07:39:16.559948996 +0000 UTC m=+727.547117580 I0805 07:39:16.576686 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0805 07:39:16.579682 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"