I0917 20:39:33.963954 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0917 20:39:33.964219 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0917 20:39:33.969977 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0917 20:39:33.970036 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0917 20:39:33.970058 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0917 20:39:33.970734 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0917 20:39:33.970749 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0917 20:39:33.970848 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0917 20:39:33.976969 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0917 20:39:33.991097 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0917 20:39:33.998956 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0917 20:39:34.004533 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0917 20:39:34.008650 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0917 20:39:34.008689 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0917 20:39:34.008698 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0917 20:39:34.008706 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0917 20:39:34.014323 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0917 20:39:34.018261 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0917 20:39:34.021326 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0917 20:39:34.024090 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0917 20:39:34.025910 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0917 20:39:34.027721 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0917 20:39:34.029467 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0917 20:39:34.033644 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0917 20:39:34.036471 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0917 20:39:34.038277 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0917 20:39:34.038410 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0917 20:39:34.040825 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0917 20:39:34.043645 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0917 20:39:34.043664 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0917 20:39:34.043748 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0917 20:39:34.046244 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0917 20:39:34.048923 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0917 20:39:34.051614 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0917 20:39:34.054864 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.055128 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.055658 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.056356 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.057380 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.072776 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.090839 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.112944 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.153811 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.173643 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:34.194996 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0917 20:39:47.114366 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-17 20:39:47.114341364 +0000 UTC m=+13.193991097 I0917 20:39:47.851181 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:39:47.851269 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-17 20:39:47.851258724 +0000 UTC m=+13.930908457 I0917 20:39:47.851765 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-17 20:39:47.851755592 +0000 UTC m=+13.931405355 I0917 20:39:47.866241 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:39:47.866355 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-17 20:39:47.866342176 +0000 UTC m=+13.945991939 E0917 20:39:47.869412 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0917 20:39:47.869520 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-17 20:39:47.869506473 +0000 UTC m=+13.949156236 E0917 20:39:47.869628 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 20:39:47.888373 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0917 20:39:47.888577 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 20:39:47.888629 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 20:39:47.888689 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0917 20:39:47.888819 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:39:47.895798 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:39:47.932966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-17 20:39:47.93294741 +0000 UTC m=+14.012597183 I0917 20:39:47.961576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-17 20:39:47.961558517 +0000 UTC m=+14.041208310 I0917 20:39:47.988186 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:39:47.988170868 +0000 UTC m=+14.067820601 I0917 20:39:48.006667 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:39:48.007372 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:39:48.007332305 +0000 UTC m=+14.086982048 I0917 20:39:48.020241 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:39:48.020529 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:39:48.020517001 +0000 UTC m=+14.100166744 I0917 20:39:48.024414 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:39:52.889250 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:39:52.889236704 +0000 UTC m=+18.968886467 I0917 20:40:16.370951 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-17 20:40:16.370932786 +0000 UTC m=+42.450582569 I0917 20:40:16.371481 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:40:16.373624 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-17 20:40:16.373608348 +0000 UTC m=+42.453258181 I0917 20:40:16.383993 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-17 20:40:16.383982721 +0000 UTC m=+42.463632464 I0917 20:40:16.408430 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:40:16.408505 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:40:16.408532 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-17 20:40:16.408526925 +0000 UTC m=+42.488176668 I0917 20:40:16.697306 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:40:16.714344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-17 20:40:16.714328902 +0000 UTC m=+42.793978645 I0917 20:40:16.746889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-17 20:40:16.746875071 +0000 UTC m=+42.826524814 I0917 20:40:16.782621 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:40:16.782607001 +0000 UTC m=+42.862256774 I0917 20:40:16.802874 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:40:16.803582 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:40:16.80357566 +0000 UTC m=+42.883225403 I0917 20:40:16.822454 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:45:30.585300 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:45:30.585427 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-25.nip.io-tls" condition "Issuing" to 2026-09-17 20:45:30.585361876 +0000 UTC m=+356.665011649 I0917 20:45:30.585761 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-25.nip.io-tls" condition "Ready" to 2026-09-17 20:45:30.585750865 +0000 UTC m=+356.665400638 I0917 20:45:30.599853 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:45:30.600232 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-25.nip.io-tls" condition "Ready" to 2026-09-17 20:45:30.600220022 +0000 UTC m=+356.679869785 I0917 20:45:30.788338 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:45:30.825626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-25.nip.io-tls-1" condition "Approved" to 2026-09-17 20:45:30.825613818 +0000 UTC m=+356.905263571 I0917 20:45:30.841683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-25.nip.io-tls-1" condition "Ready" to 2026-09-17 20:45:30.84166907 +0000 UTC m=+356.921318833 I0917 20:45:30.868869 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:45:30.868851186 +0000 UTC m=+356.948500949 I0917 20:45:30.882770 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:45:30.883572 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:45:30.883562857 +0000 UTC m=+356.963212620 I0917 20:45:30.897436 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:46:39.108038 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:46:39.108177 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-17 20:46:39.108116948 +0000 UTC m=+425.187766721 I0917 20:46:39.108399 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-17 20:46:39.108380893 +0000 UTC m=+425.188030656 E0917 20:46:39.127467 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0917 20:46:39.127550 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-17 20:46:39.127538132 +0000 UTC m=+425.207187895 E0917 20:46:39.127583 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0917 20:46:39.127931 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:46:39.128205 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-17 20:46:39.128192453 +0000 UTC m=+425.207842226 E0917 20:46:39.144778 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0917 20:46:39.146859 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 20:46:39.147038 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0917 20:46:39.147260 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0917 20:46:39.154856 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:46:39.183212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-17 20:46:39.183194319 +0000 UTC m=+425.262844062 I0917 20:46:39.200023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-17 20:46:39.200009491 +0000 UTC m=+425.279659264 I0917 20:46:39.224711 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:46:39.224698545 +0000 UTC m=+425.304348308 I0917 20:46:39.240128 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:46:39.241379 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:46:39.241369685 +0000 UTC m=+425.321019428 I0917 20:46:39.243469 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:46:39.254316 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:46:44.145960 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:46:44.145946826 +0000 UTC m=+430.225596569 I0917 20:47:27.156445 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-17 20:47:27.156396548 +0000 UTC m=+473.236046321 I0917 20:47:27.157001 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:47:27.157019 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-17 20:47:27.157015958 +0000 UTC m=+473.236665691 I0917 20:47:27.158259 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:47:27.158276 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-17 20:47:27.158272121 +0000 UTC m=+473.237921854 I0917 20:47:27.158307 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-17 20:47:27.158291181 +0000 UTC m=+473.237940924 I0917 20:47:27.163344 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-17 20:47:27.163331211 +0000 UTC m=+473.242980934 I0917 20:47:27.163392 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:47:27.166302 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-17 20:47:27.163403043 +0000 UTC m=+473.243052776 I0917 20:47:27.179955 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:27.180423 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-17 20:47:27.180414879 +0000 UTC m=+473.260064632 I0917 20:47:27.189619 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:27.189911 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-17 20:47:27.189801028 +0000 UTC m=+473.269450761 I0917 20:47:27.214353 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:27.214461 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:47:27.214868 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-17 20:47:27.214859679 +0000 UTC m=+473.294509432 I0917 20:47:27.354073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:27.379440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-17 20:47:27.3794134 +0000 UTC m=+473.459063143 I0917 20:47:27.384182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-17 20:47:27.384173965 +0000 UTC m=+473.463823708 I0917 20:47:27.400076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-17 20:47:27.400067472 +0000 UTC m=+473.479717205 I0917 20:47:27.400622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-17 20:47:27.40060929 +0000 UTC m=+473.480259023 I0917 20:47:27.426342 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:47:27.426332514 +0000 UTC m=+473.505982247 I0917 20:47:27.431940 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:47:27.431933515 +0000 UTC m=+473.511583248 I0917 20:47:27.459126 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:27.461481 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:27.893939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:28.055189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-17 20:47:28.055179738 +0000 UTC m=+474.134829461 I0917 20:47:28.114326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-17 20:47:28.11431564 +0000 UTC m=+474.193965383 I0917 20:47:28.598451 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:47:28.59843092 +0000 UTC m=+474.678080693 I0917 20:47:28.709472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:28.710418 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:47:28.710408663 +0000 UTC m=+474.790058416 I0917 20:47:28.892173 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:28.991077 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:36.219547 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" condition "Ready" to 2026-09-17 20:47:36.219523368 +0000 UTC m=+482.299173151 I0917 20:47:36.219689 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:47:36.219773 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" condition "Issuing" to 2026-09-17 20:47:36.219760533 +0000 UTC m=+482.299410296 I0917 20:47:36.273403 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bbk82-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:36.273517 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" condition "Ready" to 2026-09-17 20:47:36.27350318 +0000 UTC m=+482.353152963 I0917 20:47:36.554830 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bbk82-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:36.603060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bbk82-tls-1" condition "Approved" to 2026-09-17 20:47:36.603043821 +0000 UTC m=+482.682693584 I0917 20:47:36.656081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bbk82-tls-1" condition "Ready" to 2026-09-17 20:47:36.656071075 +0000 UTC m=+482.735720818 I0917 20:47:36.726921 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:47:36.726905378 +0000 UTC m=+482.806555151 I0917 20:47:36.774309 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bbk82-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:36.774934 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:47:36.774926843 +0000 UTC m=+482.854576586 I0917 20:47:36.799122 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bbk82-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bbk82-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:49.555223 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:47:49.555344 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-17 20:47:49.555335784 +0000 UTC m=+495.634985517 I0917 20:47:49.556425 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-17 20:47:49.556419063 +0000 UTC m=+495.636068796 I0917 20:47:49.567724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:49.567841 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:47:49.567906 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-17 20:47:49.567899325 +0000 UTC m=+495.647549068 I0917 20:47:49.820431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-17 20:47:49.820419994 +0000 UTC m=+495.900069727 I0917 20:47:49.837768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-17 20:47:49.837759439 +0000 UTC m=+495.917409172 I0917 20:47:49.876667 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:47:49.876653623 +0000 UTC m=+495.956303356 I0917 20:47:49.894013 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:49.894422 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:47:49.894415594 +0000 UTC m=+495.974065317 I0917 20:47:49.917097 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:47:49.926555 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:51:19.136645 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-17 20:51:19.136605606 +0000 UTC m=+705.216255409 I0917 20:51:19.136982 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:51:19.137070 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-17 20:51:19.137062504 +0000 UTC m=+705.216712267 I0917 20:51:19.154267 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:51:19.154357 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:51:19.154390 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-17 20:51:19.154380457 +0000 UTC m=+705.234030230 I0917 20:51:19.432379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-17 20:51:19.432365738 +0000 UTC m=+705.512015471 I0917 20:51:19.452703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-17 20:51:19.452688739 +0000 UTC m=+705.532338492 I0917 20:51:19.483211 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:51:19.483199052 +0000 UTC m=+705.562848795 I0917 20:51:19.500667 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:51:19.537993 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:52:03.327570 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0917 20:52:03.327601 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-17 20:52:03.327593574 +0000 UTC m=+749.407243307 I0917 20:52:03.327918 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-17 20:52:03.327913975 +0000 UTC m=+749.407563718 I0917 20:52:03.359078 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:52:03.359235 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-17 20:52:03.359220516 +0000 UTC m=+749.438870279 I0917 20:52:03.467508 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:52:03.496531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-17 20:52:03.496517814 +0000 UTC m=+749.576167547 I0917 20:52:03.512494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-17 20:52:03.51248105 +0000 UTC m=+749.592130783 I0917 20:52:03.537548 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:52:03.537530145 +0000 UTC m=+749.617179878 I0917 20:52:03.552194 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0917 20:52:03.553182 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-17 20:52:03.553164459 +0000 UTC m=+749.632814192 I0917 20:52:03.568059 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"