I0822 10:26:49.346375 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0822 10:26:49.346517 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0822 10:26:49.349851 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0822 10:26:49.349873 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0822 10:26:49.349884 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0822 10:26:49.350354 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0822 10:26:49.350386 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0822 10:26:49.350473 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0822 10:26:49.354868 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0822 10:26:49.372937 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0822 10:26:49.373155 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0822 10:26:49.375998 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0822 10:26:49.378367 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0822 10:26:49.381941 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0822 10:26:49.387492 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0822 10:26:49.388867 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0822 10:26:49.390578 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0822 10:26:49.392346 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0822 10:26:49.394191 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0822 10:26:49.396112 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0822 10:26:49.396129 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0822 10:26:49.396136 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0822 10:26:49.396252 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0822 10:26:49.398473 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0822 10:26:49.402966 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0822 10:26:49.404798 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0822 10:26:49.406624 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0822 10:26:49.408438 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0822 10:26:49.410110 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0822 10:26:49.410245 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0822 10:26:49.412178 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0822 10:26:49.413873 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0822 10:26:49.420065 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0822 10:26:49.424065 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0822 10:26:49.425275 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.425826 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.426609 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.426990 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.427446 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.427851 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.468741 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.485316 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.509761 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.522985 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:26:49.542913 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 10:27:03.959151 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-22 10:27:03.959131624 +0000 UTC m=+14.638656274 I0822 10:27:04.614013 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:27:04.614058 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-22 10:27:04.614050946 +0000 UTC m=+15.293575586 I0822 10:27:04.614648 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 10:27:04.614645029 +0000 UTC m=+15.294169669 E0822 10:27:04.626612 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:27:04.626685 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-22 10:27:04.626677954 +0000 UTC m=+15.306202604 E0822 10:27:04.626814 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:27:04.627354 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:27:04.627475 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 10:27:04.627468781 +0000 UTC m=+15.306993431 E0822 10:27:04.642238 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0822 10:27:04.642448 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:27:04.642471 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:27:04.642570 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0822 10:27:04.644470 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:27:04.644528 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 10:27:04.644523866 +0000 UTC m=+15.324048526 I0822 10:27:04.658989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-22 10:27:04.658980574 +0000 UTC m=+15.338505214 I0822 10:27:04.683566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-22 10:27:04.683556484 +0000 UTC m=+15.363081134 I0822 10:27:04.706218 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:27:04.706207822 +0000 UTC m=+15.385732472 I0822 10:27:04.718440 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:27:04.718793 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:27:04.718785389 +0000 UTC m=+15.398310039 I0822 10:27:04.730688 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:27:09.642844 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:27:09.642831046 +0000 UTC m=+20.322355726 I0822 10:27:31.168490 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-22 10:27:31.16847043 +0000 UTC m=+41.847995080 I0822 10:27:31.168603 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:27:31.168762 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-22 10:27:31.168751997 +0000 UTC m=+41.848276647 I0822 10:27:31.179442 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:27:31.179479 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:27:31.179492 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-22 10:27:31.179488354 +0000 UTC m=+41.859012994 I0822 10:27:31.180081 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-22 10:27:31.180069807 +0000 UTC m=+41.859594457 I0822 10:27:31.578787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-22 10:27:31.578775378 +0000 UTC m=+42.258300028 I0822 10:27:31.604809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-22 10:27:31.604795146 +0000 UTC m=+42.284319796 I0822 10:27:31.628140 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:27:31.628128691 +0000 UTC m=+42.307653371 I0822 10:27:31.640666 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:27:31.641148 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:27:31.64114171 +0000 UTC m=+42.320666350 I0822 10:27:31.654077 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:27:31.655435 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:28.978313 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Ready" to 2026-08-22 10:31:28.978259719 +0000 UTC m=+279.657784359 I0822 10:31:28.979312 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:31:28.979392 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Issuing" to 2026-08-22 10:31:28.97937962 +0000 UTC m=+279.658904300 I0822 10:31:28.993611 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:28.993763 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:31:28.993820 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Issuing" to 2026-08-22 10:31:28.993802074 +0000 UTC m=+279.673326754 I0822 10:31:29.191845 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:29.209108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-61.nip.io-tls-1" condition "Approved" to 2026-08-22 10:31:29.209091382 +0000 UTC m=+279.888616062 I0822 10:31:29.226245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-61.nip.io-tls-1" condition "Ready" to 2026-08-22 10:31:29.22623098 +0000 UTC m=+279.905755640 I0822 10:31:29.260324 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:31:29.260300282 +0000 UTC m=+279.939824952 I0822 10:31:29.274462 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:29.275068 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:31:29.275060534 +0000 UTC m=+279.954585174 I0822 10:31:29.278507 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:31:29.290122 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:32:32.924605 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:32:32.924607 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-22 10:32:32.924553287 +0000 UTC m=+343.604077937 I0822 10:32:32.924799 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-22 10:32:32.924787022 +0000 UTC m=+343.604311672 I0822 10:32:32.936696 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:32:32.936842 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-22 10:32:32.936831128 +0000 UTC m=+343.616355778 E0822 10:32:32.938302 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 10:32:32.941921 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-22 10:32:32.94165242 +0000 UTC m=+343.621177070 E0822 10:32:32.941972 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:32:32.949559 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0822 10:32:32.949934 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0822 10:32:32.950675 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:32:32.950757 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 10:32:32.950789 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0822 10:32:32.974262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-22 10:32:32.974244281 +0000 UTC m=+343.653768921 I0822 10:32:32.989759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-22 10:32:32.989743219 +0000 UTC m=+343.669267869 I0822 10:32:33.010181 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:32:33.010168823 +0000 UTC m=+343.689693473 I0822 10:32:33.024807 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:32:33.025104 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:32:33.02509545 +0000 UTC m=+343.704620100 I0822 10:32:33.039542 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:32:37.950740 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:32:37.9506987 +0000 UTC m=+348.630223370 I0822 10:33:19.719992 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:33:19.720019 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-22 10:33:19.720013021 +0000 UTC m=+390.399537661 I0822 10:33:19.720285 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-22 10:33:19.720281637 +0000 UTC m=+390.399806277 I0822 10:33:19.745520 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-22 10:33:19.745502619 +0000 UTC m=+390.425027259 I0822 10:33:19.746356 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:33:19.749962 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-22 10:33:19.749947117 +0000 UTC m=+390.429471757 I0822 10:33:19.755260 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:33:19.755336 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 10:33:19.755327785 +0000 UTC m=+390.434852425 I0822 10:33:19.761879 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 10:33:19.746383149 +0000 UTC m=+390.425907789 I0822 10:33:19.762178 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:19.762284 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-22 10:33:19.762277357 +0000 UTC m=+390.441801997 I0822 10:33:19.774145 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:19.774481 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:33:19.774532 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 10:33:19.774523286 +0000 UTC m=+390.454047946 I0822 10:33:19.779740 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:19.779780 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:33:19.779794 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 10:33:19.77978909 +0000 UTC m=+390.459313730 I0822 10:33:19.995134 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:19.997543 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:19.999585 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:20.008973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-22 10:33:20.008962623 +0000 UTC m=+390.688487263 I0822 10:33:20.024364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-22 10:33:20.024352011 +0000 UTC m=+390.703876641 I0822 10:33:20.043191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-22 10:33:20.043177283 +0000 UTC m=+390.722701933 I0822 10:33:20.044521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-22 10:33:20.044503153 +0000 UTC m=+390.724027803 I0822 10:33:20.044817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-22 10:33:20.044811459 +0000 UTC m=+390.724336109 I0822 10:33:20.066866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-22 10:33:20.066838652 +0000 UTC m=+390.746363292 I0822 10:33:20.218148 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:33:20.21813693 +0000 UTC m=+390.897661580 I0822 10:33:20.269028 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:33:20.269003585 +0000 UTC m=+390.948528225 I0822 10:33:20.513877 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:20.611968 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:20.613208 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:33:20.613197293 +0000 UTC m=+391.292721973 I0822 10:33:20.671244 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:33:20.671237796 +0000 UTC m=+391.350762446 I0822 10:33:21.063030 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:21.064264 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:33:21.064252835 +0000 UTC m=+391.743777505 I0822 10:33:21.163558 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:21.212238 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:21.515050 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:28.953697 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" condition "Ready" to 2026-08-22 10:33:28.953655195 +0000 UTC m=+399.633179875 I0822 10:33:28.954354 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:33:28.954381 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" condition "Issuing" to 2026-08-22 10:33:28.954374061 +0000 UTC m=+399.633898741 I0822 10:33:28.974900 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sckv9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:28.974969 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:33:28.974985 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" condition "Issuing" to 2026-08-22 10:33:28.974978665 +0000 UTC m=+399.654503305 I0822 10:33:29.187090 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sckv9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:29.209143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sckv9-tls-1" condition "Approved" to 2026-08-22 10:33:29.209132164 +0000 UTC m=+399.888656814 I0822 10:33:29.287508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sckv9-tls-1" condition "Ready" to 2026-08-22 10:33:29.287486951 +0000 UTC m=+399.967011591 I0822 10:33:29.325677 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:33:29.325669862 +0000 UTC m=+400.005194502 I0822 10:33:29.344003 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sckv9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:29.388752 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sckv9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sckv9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:40.109072 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:33:40.109134 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-22 10:33:40.109108476 +0000 UTC m=+410.788633116 I0822 10:33:40.109504 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 10:33:40.109500675 +0000 UTC m=+410.789025305 I0822 10:33:40.124700 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:40.124984 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 10:33:40.124889685 +0000 UTC m=+410.804414315 I0822 10:33:40.287609 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:40.338877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-22 10:33:40.338859066 +0000 UTC m=+411.018383736 I0822 10:33:40.362901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-22 10:33:40.362878659 +0000 UTC m=+411.042403299 I0822 10:33:40.385240 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:33:40.385225484 +0000 UTC m=+411.064750134 I0822 10:33:40.399025 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:33:40.399519 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:33:40.39951085 +0000 UTC m=+411.079035480 I0822 10:33:40.416109 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:36:50.470925 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-22 10:36:50.47090887 +0000 UTC m=+601.150433520 I0822 10:36:50.471077 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:36:50.471155 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 10:36:50.471144925 +0000 UTC m=+601.150669605 I0822 10:36:50.488724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:36:50.488991 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:36:50.489044 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 10:36:50.489034921 +0000 UTC m=+601.168559591 I0822 10:36:50.738462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-22 10:36:50.738449919 +0000 UTC m=+601.417974569 I0822 10:36:50.753798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-22 10:36:50.753788035 +0000 UTC m=+601.433312685 I0822 10:36:50.782489 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:36:50.782477231 +0000 UTC m=+601.462001871 I0822 10:36:50.791491 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:36:50.791922 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:36:50.79191679 +0000 UTC m=+601.471441420 I0822 10:36:50.804810 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:37:32.659076 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:37:32.659225 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 10:37:32.659212325 +0000 UTC m=+643.338737015 I0822 10:37:32.659777 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-22 10:37:32.659768118 +0000 UTC m=+643.339292798 I0822 10:37:32.675534 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:37:32.675668 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 10:37:32.675729 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 10:37:32.67572257 +0000 UTC m=+643.355247220 I0822 10:37:32.786392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-22 10:37:32.786369307 +0000 UTC m=+643.465893987 I0822 10:37:32.801103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-22 10:37:32.80109268 +0000 UTC m=+643.480617330 I0822 10:37:32.835553 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:37:32.835543642 +0000 UTC m=+643.515068282 I0822 10:37:32.852777 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 10:37:32.853538 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 10:37:32.853530901 +0000 UTC m=+643.533055551 I0822 10:37:32.867140 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"