I0919 01:48:06.521527 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0919 01:48:06.521854 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0919 01:48:06.528552 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0919 01:48:06.528588 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0919 01:48:06.528657 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0919 01:48:06.529348 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0919 01:48:06.529367 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0919 01:48:06.529460 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0919 01:48:06.534849 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0919 01:48:06.553721 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0919 01:48:06.558958 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0919 01:48:06.563529 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0919 01:48:06.567976 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0919 01:48:06.568134 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0919 01:48:06.568063 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0919 01:48:06.576181 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0919 01:48:06.580648 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0919 01:48:06.584862 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0919 01:48:06.584908 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0919 01:48:06.589064 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0919 01:48:06.593105 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0919 01:48:06.595651 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0919 01:48:06.602978 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0919 01:48:06.607116 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0919 01:48:06.611114 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0919 01:48:06.614863 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0919 01:48:06.619406 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0919 01:48:06.623579 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0919 01:48:06.630209 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0919 01:48:06.635280 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0919 01:48:06.635427 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0919 01:48:06.638692 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0919 01:48:06.638717 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0919 01:48:06.638848 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0919 01:48:06.642510 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.643104 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.643255 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.643620 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.643649 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.644547 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.664632 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.690279 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.709125 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.725359 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:06.750324 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0919 01:48:16.991581 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-19 01:48:16.991556771 +0000 UTC m=+10.500909179 I0919 01:48:17.730774 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:48:17.730890 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-19 01:48:17.730877969 +0000 UTC m=+11.240230377 I0919 01:48:17.731031 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-19 01:48:17.731020773 +0000 UTC m=+11.240373181 I0919 01:48:17.746785 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:48:17.746889 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-19 01:48:17.74687888 +0000 UTC m=+11.256231278 E0919 01:48:17.749902 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0919 01:48:17.749959 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-19 01:48:17.749948383 +0000 UTC m=+11.259300791 E0919 01:48:17.750033 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0919 01:48:17.767235 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0919 01:48:17.767343 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0919 01:48:17.767615 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0919 01:48:17.767720 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0919 01:48:17.767823 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0919 01:48:17.803444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-19 01:48:17.803431244 +0000 UTC m=+11.312783652 I0919 01:48:17.829113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-19 01:48:17.829103976 +0000 UTC m=+11.338456344 I0919 01:48:17.856009 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:48:17.855992961 +0000 UTC m=+11.365345339 I0919 01:48:17.875270 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:48:17.875758 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:48:17.875750483 +0000 UTC m=+11.385102861 I0919 01:48:17.890493 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:48:17.893513 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:48:22.768458 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:48:22.768441495 +0000 UTC m=+16.277793893 I0919 01:48:46.209397 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-19 01:48:46.209338373 +0000 UTC m=+39.718690771 I0919 01:48:46.210187 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:48:46.210260 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-19 01:48:46.210253693 +0000 UTC m=+39.719606091 I0919 01:48:46.227762 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-19 01:48:46.227747964 +0000 UTC m=+39.737100362 I0919 01:48:46.236496 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:48:46.236794 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-19 01:48:46.23677919 +0000 UTC m=+39.746131638 I0919 01:48:46.374242 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:48:46.424514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-19 01:48:46.424501596 +0000 UTC m=+39.933853984 I0919 01:48:46.470560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-19 01:48:46.470546905 +0000 UTC m=+39.979899283 I0919 01:48:46.519049 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:48:46.519031169 +0000 UTC m=+40.028383557 I0919 01:48:46.537145 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:48:46.537758 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:48:46.537746415 +0000 UTC m=+40.047098793 I0919 01:48:46.556484 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:48:46.565236 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:53:51.605549 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-5.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:53:51.605996 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-5.nip.io-tls" condition "Issuing" to 2026-09-19 01:53:51.605967631 +0000 UTC m=+345.115320079 I0919 01:53:51.606771 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-5.nip.io-tls" condition "Ready" to 2026-09-19 01:53:51.606254937 +0000 UTC m=+345.115607335 I0919 01:53:51.618362 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:53:51.618472 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-5.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:53:51.618522 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-5.nip.io-tls" condition "Issuing" to 2026-09-19 01:53:51.618492792 +0000 UTC m=+345.127845160 I0919 01:53:51.868152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-5.nip.io-tls-1" condition "Approved" to 2026-09-19 01:53:51.868122437 +0000 UTC m=+345.377474845 I0919 01:53:51.889223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-5.nip.io-tls-1" condition "Ready" to 2026-09-19 01:53:51.889207319 +0000 UTC m=+345.398559727 I0919 01:53:51.916478 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-5.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:53:51.916453964 +0000 UTC m=+345.425806362 I0919 01:53:51.934126 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:53:51.934940 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-5.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:53:51.934925193 +0000 UTC m=+345.444277601 I0919 01:53:51.952392 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:53:51.955745 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-5.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-5.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:06.289508 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-19 01:55:06.289483462 +0000 UTC m=+419.798835860 I0919 01:55:06.289528 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:55:06.289672 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-19 01:55:06.289656605 +0000 UTC m=+419.799009033 I0919 01:55:06.308907 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:06.309021 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:55:06.309058 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-19 01:55:06.30904621 +0000 UTC m=+419.818398608 E0919 01:55:06.314841 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0919 01:55:06.314934 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-19 01:55:06.314921084 +0000 UTC m=+419.824273482 E0919 01:55:06.314972 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0919 01:55:06.327478 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0919 01:55:06.327807 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0919 01:55:06.327850 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0919 01:55:06.327914 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0919 01:55:06.354523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-19 01:55:06.354505999 +0000 UTC m=+419.863858397 I0919 01:55:06.369996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-19 01:55:06.369983224 +0000 UTC m=+419.879335592 I0919 01:55:06.391579 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:55:06.391561618 +0000 UTC m=+419.900914026 I0919 01:55:06.410909 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:06.411337 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:55:06.411325569 +0000 UTC m=+419.920677967 I0919 01:55:06.431302 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:11.328062 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:55:11.328043269 +0000 UTC m=+424.837395667 I0919 01:55:55.183488 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:55:55.183521 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-19 01:55:55.183512488 +0000 UTC m=+468.692864866 I0919 01:55:55.183876 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-19 01:55:55.183868455 +0000 UTC m=+468.693220833 I0919 01:55:55.185604 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:55:55.185626 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-19 01:55:55.185622014 +0000 UTC m=+468.694974402 I0919 01:55:55.186158 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-19 01:55:55.186122192 +0000 UTC m=+468.695474580 I0919 01:55:55.186502 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:55:55.186523 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-19 01:55:55.18651929 +0000 UTC m=+468.695871668 I0919 01:55:55.186744 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-19 01:55:55.186739113 +0000 UTC m=+468.696091501 I0919 01:55:55.211777 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:55.211904 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:55:55.211962 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-19 01:55:55.21195346 +0000 UTC m=+468.721305818 I0919 01:55:55.219802 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:55.220057 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:55:55.220088 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-19 01:55:55.220080436 +0000 UTC m=+468.729432814 I0919 01:55:55.223045 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:55.223234 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:55:55.223464 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-19 01:55:55.223436434 +0000 UTC m=+468.732788842 I0919 01:55:55.430267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-19 01:55:55.430253231 +0000 UTC m=+468.939605599 I0919 01:55:55.484116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-19 01:55:55.484103821 +0000 UTC m=+468.993456189 I0919 01:55:55.524849 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:55:55.524837579 +0000 UTC m=+469.034189947 I0919 01:55:55.528219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-19 01:55:55.528212836 +0000 UTC m=+469.037565204 I0919 01:55:55.555284 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:55.569927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-19 01:55:55.569913981 +0000 UTC m=+469.079266349 I0919 01:55:55.575748 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:55.608736 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:55:55.608724478 +0000 UTC m=+469.118076846 I0919 01:55:55.677972 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:55.719778 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:55.720293 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:55:55.720287194 +0000 UTC m=+469.229639562 I0919 01:55:55.831741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-19 01:55:55.831723079 +0000 UTC m=+469.341075447 I0919 01:55:56.130432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-19 01:55:56.130418056 +0000 UTC m=+469.639770434 I0919 01:55:56.427247 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:56.681006 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:55:56.680984618 +0000 UTC m=+470.190337026 I0919 01:55:56.773213 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:56.774349 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:55:56.774333105 +0000 UTC m=+470.283685503 I0919 01:55:57.022085 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:55:57.072610 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:56:04.344484 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:56:04.344518 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" condition "Issuing" to 2026-09-19 01:56:04.344510361 +0000 UTC m=+477.853862749 I0919 01:56:04.344837 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" condition "Ready" to 2026-09-19 01:56:04.344831317 +0000 UTC m=+477.854183705 I0919 01:56:04.363085 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-99cqx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:56:04.363195 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" condition "Ready" to 2026-09-19 01:56:04.363184804 +0000 UTC m=+477.872537192 I0919 01:56:04.443240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-99cqx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:56:04.478312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-99cqx-tls-1" condition "Approved" to 2026-09-19 01:56:04.478298235 +0000 UTC m=+477.987650603 I0919 01:56:04.506974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-99cqx-tls-1" condition "Ready" to 2026-09-19 01:56:04.506962987 +0000 UTC m=+478.016315355 I0919 01:56:04.549489 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:56:04.54947681 +0000 UTC m=+478.058829168 I0919 01:56:04.569083 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-99cqx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:56:04.571031 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:56:04.571001441 +0000 UTC m=+478.080353839 I0919 01:56:04.593287 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-99cqx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-99cqx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:56:18.702677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-19 01:56:18.702659649 +0000 UTC m=+492.212012057 I0919 01:56:18.702964 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:56:18.703047 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-19 01:56:18.703035815 +0000 UTC m=+492.212388183 I0919 01:56:18.713693 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:56:18.713818 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:56:18.713858 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-19 01:56:18.713846304 +0000 UTC m=+492.223198672 I0919 01:56:19.181634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:56:19.200945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-19 01:56:19.200931496 +0000 UTC m=+492.710283874 I0919 01:56:19.218523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-19 01:56:19.218510557 +0000 UTC m=+492.727862925 I0919 01:56:19.254101 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:56:19.254071788 +0000 UTC m=+492.763424166 I0919 01:56:19.267646 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:56:19.268743 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:56:19.26873691 +0000 UTC m=+492.778089278 I0919 01:56:19.283083 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:59:47.366930 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 01:59:47.366980 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-19 01:59:47.366969038 +0000 UTC m=+700.876321436 I0919 01:59:47.367447 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-19 01:59:47.367439341 +0000 UTC m=+700.876791739 I0919 01:59:47.389784 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:59:47.389932 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-19 01:59:47.389915913 +0000 UTC m=+700.899268311 I0919 01:59:47.492825 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:59:47.531523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-19 01:59:47.53150707 +0000 UTC m=+701.040859438 I0919 01:59:47.552385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-19 01:59:47.552374147 +0000 UTC m=+701.061726515 I0919 01:59:47.574787 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:59:47.574774147 +0000 UTC m=+701.084126505 I0919 01:59:47.586480 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0919 01:59:47.590687 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 01:59:47.590680837 +0000 UTC m=+701.100033195 I0919 01:59:47.601447 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0919 02:00:33.704413 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-19 02:00:33.704400027 +0000 UTC m=+747.213752395 I0919 02:00:33.704829 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0919 02:00:33.704844 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-19 02:00:33.704841388 +0000 UTC m=+747.214193756 I0919 02:00:33.722919 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0919 02:00:33.723009 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-19 02:00:33.723001158 +0000 UTC m=+747.232353536 I0919 02:00:34.020483 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0919 02:00:34.051320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-19 02:00:34.051299594 +0000 UTC m=+747.560652002 I0919 02:00:34.072292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-19 02:00:34.072277274 +0000 UTC m=+747.581629652 I0919 02:00:34.101223 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-19 02:00:34.101210551 +0000 UTC m=+747.610562909 I0919 02:00:34.112306 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0919 02:00:34.149847 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"