I0831 19:43:46.423064 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0831 19:43:46.423232 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0831 19:43:46.428085 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0831 19:43:46.428135 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0831 19:43:46.428149 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0831 19:43:46.428691 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0831 19:43:46.428727 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0831 19:43:46.428799 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0831 19:43:46.433322 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0831 19:43:46.450730 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0831 19:43:46.458975 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0831 19:43:46.459014 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0831 19:43:46.459129 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0831 19:43:46.464158 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0831 19:43:46.468430 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0831 19:43:46.475558 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0831 19:43:46.480631 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0831 19:43:46.485645 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0831 19:43:46.489398 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0831 19:43:46.489436 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0831 19:43:46.493921 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0831 19:43:46.498046 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0831 19:43:46.504701 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0831 19:43:46.508662 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0831 19:43:46.512252 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0831 19:43:46.515764 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0831 19:43:46.515900 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0831 19:43:46.519594 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0831 19:43:46.523281 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0831 19:43:46.525747 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0831 19:43:46.525847 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0831 19:43:46.532148 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0831 19:43:46.536326 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0831 19:43:46.536573 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0831 19:43:46.539101 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.539686 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.540109 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.540634 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.541108 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.541590 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.564051 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.584547 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.603989 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.628217 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:46.646507 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0831 19:43:59.333172 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-31 19:43:59.33311622 +0000 UTC m=+12.941384542 I0831 19:44:00.052206 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-31 19:44:00.052196903 +0000 UTC m=+13.660465185 I0831 19:44:00.052908 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:44:00.066876 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-31 19:44:00.066849529 +0000 UTC m=+13.675117911 E0831 19:44:00.092527 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0831 19:44:00.092593 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-31 19:44:00.09258696 +0000 UTC m=+13.700855252 E0831 19:44:00.092612 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0831 19:44:00.094742 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:44:00.094896 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:44:00.094931 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-31 19:44:00.094925645 +0000 UTC m=+13.703193917 E0831 19:44:00.110934 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0831 19:44:00.111274 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0831 19:44:00.111308 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0831 19:44:00.111329 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0831 19:44:00.134501 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:44:00.149252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-31 19:44:00.149236742 +0000 UTC m=+13.757505054 I0831 19:44:00.182068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-31 19:44:00.182056592 +0000 UTC m=+13.790324884 I0831 19:44:00.205097 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:44:00.205079849 +0000 UTC m=+13.813348171 I0831 19:44:00.219783 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:44:00.220333 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:44:00.220324136 +0000 UTC m=+13.828592458 I0831 19:44:00.233881 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:44:05.112194 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:44:05.112181108 +0000 UTC m=+18.720449430 I0831 19:44:30.050852 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-31 19:44:30.050777648 +0000 UTC m=+43.659045960 I0831 19:44:30.051156 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:44:30.051328 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-31 19:44:30.051311388 +0000 UTC m=+43.659579710 I0831 19:44:30.065727 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-31 19:44:30.065706 +0000 UTC m=+43.673974292 I0831 19:44:30.070965 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:44:30.071087 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:44:30.071161 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-31 19:44:30.071152269 +0000 UTC m=+43.679420561 I0831 19:44:30.294247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-31 19:44:30.294235715 +0000 UTC m=+43.902503997 I0831 19:44:30.312268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-31 19:44:30.312258853 +0000 UTC m=+43.920527135 I0831 19:44:30.332303 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:44:30.332296038 +0000 UTC m=+43.940564310 I0831 19:44:30.345754 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:44:30.346462 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:44:30.346457646 +0000 UTC m=+43.954725918 I0831 19:44:30.381566 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:49:36.015001 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-121.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:49:36.015004 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Ready" to 2026-08-31 19:49:36.01488643 +0000 UTC m=+349.623154742 I0831 19:49:36.015079 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Issuing" to 2026-08-31 19:49:36.015069984 +0000 UTC m=+349.623338296 I0831 19:49:36.028315 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:49:36.028399 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-121.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:49:36.028424 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Issuing" to 2026-08-31 19:49:36.028417292 +0000 UTC m=+349.636685604 I0831 19:49:36.383136 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:49:36.408573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-121.nip.io-tls-1" condition "Approved" to 2026-08-31 19:49:36.408558153 +0000 UTC m=+350.016826465 I0831 19:49:36.424194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-121.nip.io-tls-1" condition "Ready" to 2026-08-31 19:49:36.424181883 +0000 UTC m=+350.032450185 I0831 19:49:36.446000 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-121.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:49:36.44594259 +0000 UTC m=+350.054210882 I0831 19:49:36.456784 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-121.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-121.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:50:42.224348 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-31 19:50:42.22429865 +0000 UTC m=+415.832566962 I0831 19:50:42.224474 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:50:42.224557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-31 19:50:42.224545805 +0000 UTC m=+415.832814117 E0831 19:50:42.238490 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0831 19:50:42.238598 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-31 19:50:42.238586407 +0000 UTC m=+415.846854719 E0831 19:50:42.238631 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0831 19:50:42.242522 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:50:42.242627 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:50:42.242661 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-31 19:50:42.242651001 +0000 UTC m=+415.850919313 E0831 19:50:42.248059 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0831 19:50:42.248536 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0831 19:50:42.248637 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0831 19:50:42.248684 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0831 19:50:42.281790 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:50:42.289229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-31 19:50:42.28920926 +0000 UTC m=+415.897477572 I0831 19:50:42.306326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-31 19:50:42.306308186 +0000 UTC m=+415.914576498 I0831 19:50:42.329712 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:50:42.329696712 +0000 UTC m=+415.937965034 I0831 19:50:42.345641 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:50:42.346768 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:50:42.346752897 +0000 UTC m=+415.955021269 I0831 19:50:42.352906 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:50:42.362986 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:50:42.363404 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:50:42.363389613 +0000 UTC m=+415.971657925 I0831 19:50:47.248866 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:50:47.24885259 +0000 UTC m=+420.857120912 I0831 19:51:30.555591 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:51:30.555630 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-31 19:51:30.555621179 +0000 UTC m=+464.163889461 I0831 19:51:30.555631 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-31 19:51:30.555621199 +0000 UTC m=+464.163889481 I0831 19:51:30.559023 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:51:30.559055 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-31 19:51:30.559047448 +0000 UTC m=+464.167315730 I0831 19:51:30.559822 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-31 19:51:30.559814543 +0000 UTC m=+464.168082825 I0831 19:51:30.561189 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:51:30.561219 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-31 19:51:30.561210241 +0000 UTC m=+464.169478523 I0831 19:51:30.561597 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-31 19:51:30.561592589 +0000 UTC m=+464.169860871 I0831 19:51:30.597913 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:30.598023 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:51:30.598058 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-31 19:51:30.5980479 +0000 UTC m=+464.206316182 I0831 19:51:30.603362 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:30.603415 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:51:30.604929 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:30.604982 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-31 19:51:30.604972979 +0000 UTC m=+464.213241251 I0831 19:51:30.607000 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-31 19:51:30.603431358 +0000 UTC m=+464.211699640 I0831 19:51:30.690315 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:30.718146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-31 19:51:30.718134341 +0000 UTC m=+464.326402623 I0831 19:51:30.731549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-31 19:51:30.731524819 +0000 UTC m=+464.339793101 I0831 19:51:30.760580 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:51:30.760565062 +0000 UTC m=+464.368833344 I0831 19:51:30.773508 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:30.773910 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:51:30.77390341 +0000 UTC m=+464.382171682 I0831 19:51:30.787022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-31 19:51:30.787008602 +0000 UTC m=+464.395276884 I0831 19:51:30.791570 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:30.798720 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:30.799845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-31 19:51:30.79983765 +0000 UTC m=+464.408105932 I0831 19:51:30.905051 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:51:30.905034921 +0000 UTC m=+464.513303213 I0831 19:51:30.987316 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:30.987831 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:51:30.987819933 +0000 UTC m=+464.596088225 I0831 19:51:31.189300 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:31.450917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-31 19:51:31.45090384 +0000 UTC m=+465.059172112 I0831 19:51:31.558159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-31 19:51:31.558150352 +0000 UTC m=+465.166418634 I0831 19:51:32.044141 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:51:32.044110727 +0000 UTC m=+465.652379049 I0831 19:51:32.138649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:38.940647 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:51:38.940725 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" condition "Issuing" to 2026-08-31 19:51:38.940717822 +0000 UTC m=+472.548986114 I0831 19:51:38.941276 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" condition "Ready" to 2026-08-31 19:51:38.941257223 +0000 UTC m=+472.549525515 I0831 19:51:38.956304 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bn68k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:38.956586 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:51:38.956746 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" condition "Issuing" to 2026-08-31 19:51:38.956616209 +0000 UTC m=+472.564884501 I0831 19:51:39.087249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bn68k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:39.106806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bn68k-tls-1" condition "Approved" to 2026-08-31 19:51:39.106776156 +0000 UTC m=+472.715044438 I0831 19:51:39.117216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bn68k-tls-1" condition "Ready" to 2026-08-31 19:51:39.117207845 +0000 UTC m=+472.725476127 I0831 19:51:39.147931 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:51:39.147917138 +0000 UTC m=+472.756185420 I0831 19:51:39.166018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bn68k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:39.198778 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bn68k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bn68k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:52.575266 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:51:52.575321 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-31 19:51:52.575309113 +0000 UTC m=+486.183577405 I0831 19:51:52.575922 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-31 19:51:52.575915615 +0000 UTC m=+486.184183907 I0831 19:51:52.587487 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:52.587620 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-31 19:51:52.587610758 +0000 UTC m=+486.195879030 I0831 19:51:52.666346 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:52.694941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-31 19:51:52.694925914 +0000 UTC m=+486.303194196 I0831 19:51:52.715229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-31 19:51:52.715213635 +0000 UTC m=+486.323481917 I0831 19:51:52.734246 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:51:52.734227603 +0000 UTC m=+486.342495885 I0831 19:51:52.743941 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:52.744377 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:51:52.744367463 +0000 UTC m=+486.352635745 I0831 19:51:52.756347 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:51:52.761329 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:55:12.871788 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:55:12.871862 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-31 19:55:12.871848827 +0000 UTC m=+686.480117149 I0831 19:55:12.871844 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-31 19:55:12.871831037 +0000 UTC m=+686.480099349 I0831 19:55:12.887893 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:55:12.888039 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-31 19:55:12.888024789 +0000 UTC m=+686.496293101 I0831 19:55:12.966123 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:55:13.008858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-31 19:55:13.00883952 +0000 UTC m=+686.617107802 I0831 19:55:13.026629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-31 19:55:13.026613297 +0000 UTC m=+686.634881589 I0831 19:55:13.057349 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:55:13.057330729 +0000 UTC m=+686.665599021 I0831 19:55:13.073182 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:55:58.873415 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-31 19:55:58.873396862 +0000 UTC m=+732.481665174 I0831 19:55:58.874078 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:55:58.874132 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-31 19:55:58.874126465 +0000 UTC m=+732.482394778 I0831 19:55:58.888819 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:55:58.888955 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0831 19:55:58.889004 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-31 19:55:58.888995264 +0000 UTC m=+732.497263576 I0831 19:55:59.120254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-31 19:55:59.120237465 +0000 UTC m=+732.728505777 I0831 19:55:59.137049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-31 19:55:59.137031425 +0000 UTC m=+732.745299737 I0831 19:55:59.172039 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:55:59.172017762 +0000 UTC m=+732.780286084 I0831 19:55:59.188965 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0831 19:55:59.189561 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-31 19:55:59.189552408 +0000 UTC m=+732.797820690 I0831 19:55:59.203075 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"