I0922 01:58:46.088523 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0922 01:58:46.088742 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0922 01:58:46.093234 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0922 01:58:46.093319 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0922 01:58:46.093357 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0922 01:58:46.093880 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0922 01:58:46.094219 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0922 01:58:46.094344 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0922 01:58:46.097892 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0922 01:58:46.114798 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0922 01:58:46.119718 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0922 01:58:46.123422 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0922 01:58:46.127301 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0922 01:58:46.133541 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0922 01:58:46.137655 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0922 01:58:46.141462 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0922 01:58:46.145238 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0922 01:58:46.149000 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0922 01:58:46.153632 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0922 01:58:46.157619 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0922 01:58:46.159838 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0922 01:58:46.159859 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0922 01:58:46.159865 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0922 01:58:46.159997 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0922 01:58:46.163511 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0922 01:58:46.166980 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0922 01:58:46.170754 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0922 01:58:46.174444 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0922 01:58:46.174605 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0922 01:58:46.178396 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0922 01:58:46.181620 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0922 01:58:46.181641 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0922 01:58:46.181753 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0922 01:58:46.187857 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0922 01:58:46.190910 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.190910 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.191772 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.192592 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.193134 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.193401 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.214615 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.232272 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.252621 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.271023 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:46.294828 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:58:56.662693 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-22 01:58:56.662668347 +0000 UTC m=+10.612904127 I0922 01:58:57.341547 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-22 01:58:57.341532158 +0000 UTC m=+11.291767948 I0922 01:58:57.342262 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:58:57.342339 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-22 01:58:57.342319565 +0000 UTC m=+11.292555345 I0922 01:58:57.355701 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:58:57.355838 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-22 01:58:57.355827368 +0000 UTC m=+11.306063148 E0922 01:58:57.358285 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 01:58:57.358403 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-22 01:58:57.358395822 +0000 UTC m=+11.308631602 E0922 01:58:57.358536 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:58:57.373262 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0922 01:58:57.373388 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:58:57.373426 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:58:57.373465 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0922 01:58:57.376515 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:58:57.409648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-22 01:58:57.409632709 +0000 UTC m=+11.359868499 I0922 01:58:57.435895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-22 01:58:57.435880299 +0000 UTC m=+11.386116079 I0922 01:58:57.466504 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:58:57.466484478 +0000 UTC m=+11.416720268 I0922 01:58:57.478528 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:58:57.479012 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:58:57.479002132 +0000 UTC m=+11.429237912 I0922 01:58:57.489902 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:58:57.498966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:02.373974 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:59:02.373931862 +0000 UTC m=+16.324167642 I0922 01:59:26.511793 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:59:26.511867 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-22 01:59:26.511860069 +0000 UTC m=+40.462095829 I0922 01:59:26.511863 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-22 01:59:26.511839908 +0000 UTC m=+40.462075708 I0922 01:59:26.529494 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-22 01:59:26.52947987 +0000 UTC m=+40.479715650 I0922 01:59:26.540409 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:26.540526 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-22 01:59:26.540516335 +0000 UTC m=+40.490752095 I0922 01:59:26.740137 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:26.771240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-22 01:59:26.771225176 +0000 UTC m=+40.721460956 I0922 01:59:26.798655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-22 01:59:26.798645311 +0000 UTC m=+40.748881061 I0922 01:59:26.822092 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:59:26.822075062 +0000 UTC m=+40.772310842 I0922 01:59:26.838300 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:59:26.893131 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:23.883260 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-209.nip.io-tls" condition "Ready" to 2026-09-22 02:04:23.883217905 +0000 UTC m=+337.833453725 I0922 02:04:23.883584 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-209.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:04:23.883621 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-209.nip.io-tls" condition "Issuing" to 2026-09-22 02:04:23.883617602 +0000 UTC m=+337.833853352 I0922 02:04:23.898213 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:23.898439 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-209.nip.io-tls" condition "Ready" to 2026-09-22 02:04:23.898377674 +0000 UTC m=+337.848613484 I0922 02:04:24.138357 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:24.172409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-209.nip.io-tls-1" condition "Approved" to 2026-09-22 02:04:24.172396796 +0000 UTC m=+338.122632556 I0922 02:04:24.198969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-209.nip.io-tls-1" condition "Ready" to 2026-09-22 02:04:24.198955369 +0000 UTC m=+338.149191159 I0922 02:04:24.227413 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:04:24.227400784 +0000 UTC m=+338.177636534 I0922 02:04:24.243573 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:24.244909 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:04:24.244903492 +0000 UTC m=+338.195139242 I0922 02:04:24.251565 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:04:24.261996 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:32.096889 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 02:05:32.096871488 +0000 UTC m=+406.047107238 I0922 02:05:32.097171 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:05:32.097201 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-22 02:05:32.097198583 +0000 UTC m=+406.047434333 E0922 02:05:32.127353 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 02:05:32.127452 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-22 02:05:32.127436471 +0000 UTC m=+406.077672261 E0922 02:05:32.127487 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 02:05:32.127694 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:32.128040 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 02:05:32.12803333 +0000 UTC m=+406.078269110 E0922 02:05:32.138513 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0922 02:05:32.139304 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 02:05:32.139460 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 02:05:32.139590 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0922 02:05:32.143703 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:32.143897 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 02:05:32.14388216 +0000 UTC m=+406.094117960 I0922 02:05:32.155682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-22 02:05:32.155669829 +0000 UTC m=+406.105905589 I0922 02:05:32.157491 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 02:05:32.157481616 +0000 UTC m=+406.107717376 I0922 02:05:32.166005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:32.174068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-22 02:05:32.174035407 +0000 UTC m=+406.124271167 I0922 02:05:32.197597 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:05:32.197582224 +0000 UTC m=+406.147817984 I0922 02:05:32.215587 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:05:37.139288 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:05:37.139264468 +0000 UTC m=+411.089500248 I0922 02:06:18.729270 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:18.729317 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-22 02:06:18.729310678 +0000 UTC m=+452.679546438 I0922 02:06:18.733807 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-22 02:06:18.733788572 +0000 UTC m=+452.684024362 I0922 02:06:18.734179 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:18.734788 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-22 02:06:18.734771816 +0000 UTC m=+452.685007586 I0922 02:06:18.735290 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-22 02:06:18.735280093 +0000 UTC m=+452.685515843 I0922 02:06:18.736292 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-22 02:06:18.736282738 +0000 UTC m=+452.686518498 I0922 02:06:18.738029 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:18.738092 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-22 02:06:18.738087764 +0000 UTC m=+452.688323514 I0922 02:06:18.770380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:18.770752 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:18.770800 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-22 02:06:18.770787533 +0000 UTC m=+452.721023283 I0922 02:06:18.779665 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:18.779729 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-22 02:06:18.779723101 +0000 UTC m=+452.729958851 I0922 02:06:18.780761 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:18.780800 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:18.780813 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-22 02:06:18.780810297 +0000 UTC m=+452.731046047 I0922 02:06:18.926351 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:18.945078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-22 02:06:18.945068055 +0000 UTC m=+452.895303805 I0922 02:06:18.954876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-22 02:06:18.954867456 +0000 UTC m=+452.905103196 I0922 02:06:18.971919 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:18.97190582 +0000 UTC m=+452.922141570 I0922 02:06:18.988201 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:18.994749 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:18.994741118 +0000 UTC m=+452.944976868 I0922 02:06:19.006380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:19.006763 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:19.00675743 +0000 UTC m=+452.956993180 I0922 02:06:19.007054 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:19.135856 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:19.145288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-22 02:06:19.145279227 +0000 UTC m=+453.095514977 I0922 02:06:19.161716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-22 02:06:19.161707743 +0000 UTC m=+453.111943493 I0922 02:06:19.188904 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:19.188894843 +0000 UTC m=+453.139130593 I0922 02:06:19.215781 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:19.668240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:19.723271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-22 02:06:19.723254166 +0000 UTC m=+453.673489946 I0922 02:06:19.977550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-22 02:06:19.977535752 +0000 UTC m=+453.927771532 I0922 02:06:20.296033 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:20.296015595 +0000 UTC m=+454.246251385 I0922 02:06:20.367514 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:20.368202 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:20.368190859 +0000 UTC m=+454.318426639 I0922 02:06:20.618500 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:20.668245 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:20.767333 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:27.045632 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls" condition "Ready" to 2026-09-22 02:06:27.045610049 +0000 UTC m=+460.995845789 I0922 02:06:27.045933 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:27.045947 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls" condition "Issuing" to 2026-09-22 02:06:27.045944863 +0000 UTC m=+460.996180613 I0922 02:06:27.056600 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:27.056659 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls" condition "Ready" to 2026-09-22 02:06:27.056652106 +0000 UTC m=+461.006887856 I0922 02:06:27.284383 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:27.311933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls-1" condition "Approved" to 2026-09-22 02:06:27.311924578 +0000 UTC m=+461.262160328 I0922 02:06:27.333415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls-1" condition "Ready" to 2026-09-22 02:06:27.333404554 +0000 UTC m=+461.283640304 I0922 02:06:27.364716 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:27.364706969 +0000 UTC m=+461.314942719 I0922 02:06:27.380887 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ndzkw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:41.459482 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-22 02:06:41.459469348 +0000 UTC m=+475.409705098 I0922 02:06:41.459852 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:41.459881 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-22 02:06:41.459878254 +0000 UTC m=+475.410114004 I0922 02:06:41.469468 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:41.469575 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:06:41.469593 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-22 02:06:41.46959007 +0000 UTC m=+475.419825810 I0922 02:06:41.937141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-22 02:06:41.937126138 +0000 UTC m=+475.887361918 I0922 02:06:42.037884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-22 02:06:42.037870363 +0000 UTC m=+475.988106153 I0922 02:06:42.106914 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:42.106896232 +0000 UTC m=+476.057132012 I0922 02:06:42.204112 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:06:42.205342 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:06:42.205320184 +0000 UTC m=+476.155555964 I0922 02:06:42.237414 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:10:12.707344 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-22 02:10:12.707325249 +0000 UTC m=+686.657561059 I0922 02:10:12.707665 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:10:12.707729 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-22 02:10:12.707721403 +0000 UTC m=+686.657957163 I0922 02:10:12.722717 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:10:12.722887 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-22 02:10:12.722878853 +0000 UTC m=+686.673114633 I0922 02:10:12.946699 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:10:12.980653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-22 02:10:12.980639926 +0000 UTC m=+686.930875686 I0922 02:10:12.998533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-22 02:10:12.998520483 +0000 UTC m=+686.948756243 I0922 02:10:13.039979 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:10:13.039969277 +0000 UTC m=+686.990205037 I0922 02:10:13.058729 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:10:13.095205 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:11:27.190198 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-22 02:11:27.190182919 +0000 UTC m=+761.140418699 I0922 02:11:27.190519 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 02:11:27.190595 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-22 02:11:27.190587432 +0000 UTC m=+761.140823192 I0922 02:11:27.205895 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:11:27.206035 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-22 02:11:27.206022935 +0000 UTC m=+761.156258715 I0922 02:11:27.465753 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:11:27.502970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-22 02:11:27.502956507 +0000 UTC m=+761.453192267 I0922 02:11:27.520988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-22 02:11:27.52097864 +0000 UTC m=+761.471214400 I0922 02:11:27.546092 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:11:27.54608409 +0000 UTC m=+761.496319840 I0922 02:11:27.562493 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:11:27.567906 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:11:27.56789559 +0000 UTC m=+761.518131370 I0922 02:11:27.578621 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:11:27.579109 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 02:11:27.579788 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 02:11:27.579777594 +0000 UTC m=+761.530013374