I0917 17:14:36.343443 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0917 17:14:36.343593 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0917 17:14:36.346085 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0917 17:14:36.346103 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0917 17:14:36.346110 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0917 17:14:36.346484 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0917 17:14:36.346531 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0917 17:14:36.346563 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0917 17:14:36.348327 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0917 17:14:36.356811 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0917 17:14:36.361460 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0917 17:14:36.361563 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0917 17:14:36.363633 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0917 17:14:36.365466 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0917 17:14:36.368104 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0917 17:14:36.368228 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0917 17:14:36.370209 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0917 17:14:36.373868 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0917 17:14:36.375764 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0917 17:14:36.377567 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0917 17:14:36.379559 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0917 17:14:36.381211 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0917 17:14:36.383074 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0917 17:14:36.387069 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0917 17:14:36.389273 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0917 17:14:36.391224 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0917 17:14:36.391241 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0917 17:14:36.393252 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0917 17:14:36.393269 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0917 17:14:36.393279 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0917 17:14:36.393402 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0917 17:14:36.395952 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0917 17:14:36.398049 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0917 17:14:36.400634 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0917 17:14:36.402836 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.402962 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.403355 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.404720 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.405866 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.406302 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.415237 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.430766 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.446033 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.461492 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:36.478650 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 17:14:49.588796 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-17 17:14:49.588773676 +0000 UTC m=+13.269019673 I0917 17:14:50.326323 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:14:50.326333 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-17 17:14:50.326318639 +0000 UTC m=+14.006564666 I0917 17:14:50.326364 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-17 17:14:50.32635678 +0000 UTC m=+14.006602817 I0917 17:14:50.341960 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:14:50.342148 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-17 17:14:50.342137448 +0000 UTC m=+14.022383455 E0917 17:14:50.346585 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0917 17:14:50.346657 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-17 17:14:50.346648579 +0000 UTC m=+14.026894586 E0917 17:14:50.346790 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 17:14:50.362359 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0917 17:14:50.362535 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 17:14:50.362609 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 17:14:50.362700 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0917 17:14:50.368182 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:14:50.404603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-17 17:14:50.404589451 +0000 UTC m=+14.084835488 I0917 17:14:50.434054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-17 17:14:50.433998414 +0000 UTC m=+14.114244401 I0917 17:14:50.457506 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:14:50.45749299 +0000 UTC m=+14.137738987 I0917 17:14:50.474060 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:14:55.363054 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:14:55.363038096 +0000 UTC m=+19.043284123 I0917 17:15:18.873566 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:15:18.873665 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-17 17:15:18.873658304 +0000 UTC m=+42.553904341 I0917 17:15:18.874029 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-17 17:15:18.873225196 +0000 UTC m=+42.553471223 I0917 17:15:18.883828 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-17 17:15:18.883814818 +0000 UTC m=+42.564060825 I0917 17:15:18.907337 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:15:18.907519 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:15:18.907583 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-17 17:15:18.907549721 +0000 UTC m=+42.587795758 I0917 17:15:19.114727 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:15:19.122274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-17 17:15:19.122266914 +0000 UTC m=+42.802512911 I0917 17:15:19.151070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-17 17:15:19.151061139 +0000 UTC m=+42.831307136 I0917 17:15:19.192467 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:15:19.192442144 +0000 UTC m=+42.872688161 I0917 17:15:19.213030 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:15:19.253307 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:20:05.495945 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-104.nip.io-tls" condition "Ready" to 2026-09-17 17:20:05.495907156 +0000 UTC m=+329.176153183 I0917 17:20:05.496205 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-104.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:20:05.496374 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-104.nip.io-tls" condition "Issuing" to 2026-09-17 17:20:05.496269014 +0000 UTC m=+329.176515081 I0917 17:20:05.511930 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-104.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-104.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:20:05.512063 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-104.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:20:05.512086 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-104.nip.io-tls" condition "Issuing" to 2026-09-17 17:20:05.512079534 +0000 UTC m=+329.192325551 I0917 17:20:05.719667 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-104.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-104.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:20:05.743626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-104.nip.io-tls-1" condition "Approved" to 2026-09-17 17:20:05.743617584 +0000 UTC m=+329.423863581 I0917 17:20:05.772065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-104.nip.io-tls-1" condition "Ready" to 2026-09-17 17:20:05.772054349 +0000 UTC m=+329.452300356 I0917 17:20:05.807053 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-104.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:20:05.807043776 +0000 UTC m=+329.487289783 I0917 17:20:05.826850 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-104.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-104.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:20:05.829881 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-104.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:20:05.829872469 +0000 UTC m=+329.510118476 I0917 17:20:05.844055 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-104.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-104.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:20:05.844587 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-104.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:20:05.844578443 +0000 UTC m=+329.524824450 I0917 17:21:12.866128 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:21:12.866212 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-17 17:21:12.866176568 +0000 UTC m=+396.546422595 I0917 17:21:12.866211 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-17 17:21:12.866172408 +0000 UTC m=+396.546418405 E0917 17:21:12.876525 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0917 17:21:12.876569 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-17 17:21:12.876564065 +0000 UTC m=+396.556810062 E0917 17:21:12.876611 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0917 17:21:12.882220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:12.882314 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:21:12.882398 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-17 17:21:12.882334754 +0000 UTC m=+396.562580761 E0917 17:21:12.885856 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0917 17:21:12.885926 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 17:21:12.885987 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 17:21:12.886010 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0917 17:21:12.913012 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:12.919664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-17 17:21:12.919649248 +0000 UTC m=+396.599895275 I0917 17:21:12.933653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-17 17:21:12.933644413 +0000 UTC m=+396.613890400 I0917 17:21:12.958220 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:12.958206837 +0000 UTC m=+396.638452864 I0917 17:21:12.970845 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:12.971178 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:12.971170542 +0000 UTC m=+396.651416569 I0917 17:21:12.975428 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:12.985351 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:12.985855 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:12.98584417 +0000 UTC m=+396.666090177 I0917 17:21:17.886531 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:17.886518012 +0000 UTC m=+401.566764039 I0917 17:21:58.386415 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-17 17:21:58.386403218 +0000 UTC m=+442.066649275 I0917 17:21:58.387335 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:21:58.393823 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-17 17:21:58.387369795 +0000 UTC m=+442.067615792 I0917 17:21:58.393932 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-17 17:21:58.393919845 +0000 UTC m=+442.074165842 I0917 17:21:58.394294 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:21:58.396838 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-17 17:21:58.396823314 +0000 UTC m=+442.077069341 I0917 17:21:58.401992 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-17 17:21:58.401982842 +0000 UTC m=+442.082228839 I0917 17:21:58.404142 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:21:58.406209 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-17 17:21:58.406198183 +0000 UTC m=+442.086444210 I0917 17:21:58.424950 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:58.425028 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:21:58.425055 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-17 17:21:58.425048582 +0000 UTC m=+442.105294579 I0917 17:21:58.425575 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:58.428837 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:58.433881 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:21:58.433976 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-17 17:21:58.433966974 +0000 UTC m=+442.114212981 I0917 17:21:58.429446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-17 17:21:58.429433757 +0000 UTC m=+442.109679754 I0917 17:21:58.585505 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:58.612250 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:58.613165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-17 17:21:58.613157368 +0000 UTC m=+442.293403365 I0917 17:21:58.616409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-17 17:21:58.616394833 +0000 UTC m=+442.296640830 I0917 17:21:58.630511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-17 17:21:58.630501512 +0000 UTC m=+442.310747499 I0917 17:21:58.636494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-17 17:21:58.636485243 +0000 UTC m=+442.316731250 I0917 17:21:58.654527 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:58.654519938 +0000 UTC m=+442.334765935 I0917 17:21:58.660093 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:58.660085722 +0000 UTC m=+442.340331719 I0917 17:21:58.667314 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:58.667913 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:58.667904835 +0000 UTC m=+442.348150832 I0917 17:21:58.674539 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:58.675024 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:58.675018596 +0000 UTC m=+442.355264593 I0917 17:21:58.827792 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:58.978767 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:59.281380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:59.340212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-17 17:21:59.340195366 +0000 UTC m=+443.020441403 I0917 17:21:59.692029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-17 17:21:59.692013382 +0000 UTC m=+443.372259379 I0917 17:21:59.885918 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:59.885904278 +0000 UTC m=+443.566150275 I0917 17:21:59.984972 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:21:59.985660 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:21:59.985651582 +0000 UTC m=+443.665897579 I0917 17:22:00.179001 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:22:03.525824 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:22:03.525915 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" condition "Issuing" to 2026-09-17 17:22:03.525886074 +0000 UTC m=+447.206132091 I0917 17:22:03.526215 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" condition "Ready" to 2026-09-17 17:22:03.526209509 +0000 UTC m=+447.206455506 I0917 17:22:03.542707 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:22:03.542801 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" condition "Ready" to 2026-09-17 17:22:03.542776507 +0000 UTC m=+447.223022504 I0917 17:22:03.813984 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:22:03.839195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls-1" condition "Approved" to 2026-09-17 17:22:03.839183474 +0000 UTC m=+447.519429471 I0917 17:22:03.857534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls-1" condition "Ready" to 2026-09-17 17:22:03.857514792 +0000 UTC m=+447.537760829 I0917 17:22:03.879495 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:22:03.879470229 +0000 UTC m=+447.559716226 I0917 17:22:03.890240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:22:03.891160 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:22:03.891150786 +0000 UTC m=+447.571396803 I0917 17:22:03.901893 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-r5rs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:22:18.590789 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-17 17:22:18.590776381 +0000 UTC m=+462.271022378 I0917 17:22:18.590979 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:22:18.591068 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-17 17:22:18.591058746 +0000 UTC m=+462.271304753 I0917 17:22:18.607778 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:22:18.607907 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:22:18.607951 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-17 17:22:18.60792441 +0000 UTC m=+462.288170407 I0917 17:22:18.822394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-17 17:22:18.822383071 +0000 UTC m=+462.502629068 I0917 17:22:18.840279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-17 17:22:18.840269832 +0000 UTC m=+462.520515829 I0917 17:22:18.870036 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:22:18.870023577 +0000 UTC m=+462.550269574 I0917 17:22:18.891872 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:22:18.899766 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:25:37.055684 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-17 17:25:37.055672771 +0000 UTC m=+660.735918768 I0917 17:25:37.055685 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:25:37.056084 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-17 17:25:37.056044115 +0000 UTC m=+660.736290152 I0917 17:25:37.066962 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:25:37.067061 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:25:37.067092 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-17 17:25:37.067083901 +0000 UTC m=+660.747329928 I0917 17:25:37.364323 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:25:37.377766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-17 17:25:37.377755793 +0000 UTC m=+661.058001790 I0917 17:25:37.395783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-17 17:25:37.395773582 +0000 UTC m=+661.076019579 I0917 17:25:37.420273 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:25:37.420264095 +0000 UTC m=+661.100510092 I0917 17:25:37.439898 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:25:37.474387 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:26:23.334564 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-17 17:26:23.334549498 +0000 UTC m=+707.014795535 I0917 17:26:23.334578 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:26:23.334638 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-17 17:26:23.334629339 +0000 UTC m=+707.014875366 I0917 17:26:23.350886 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:26:23.350971 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 17:26:23.350997 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-17 17:26:23.350991512 +0000 UTC m=+707.031237529 I0917 17:26:23.481633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:26:23.491960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-17 17:26:23.491948493 +0000 UTC m=+707.172194490 I0917 17:26:23.513163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-17 17:26:23.513152098 +0000 UTC m=+707.193398095 I0917 17:26:23.540984 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:26:23.540971449 +0000 UTC m=+707.221217446 I0917 17:26:23.555404 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 17:26:23.558496 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 17:26:23.558482996 +0000 UTC m=+707.238728993 I0917 17:26:23.571145 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"