I0922 01:40:39.539264 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0922 01:40:39.539650 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0922 01:40:39.544261 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0922 01:40:39.544374 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0922 01:40:39.544506 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0922 01:40:39.545258 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0922 01:40:39.545446 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0922 01:40:39.545444 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0922 01:40:39.552186 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0922 01:40:39.566671 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0922 01:40:39.571222 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0922 01:40:39.575118 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0922 01:40:39.581061 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0922 01:40:39.584690 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0922 01:40:39.588653 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0922 01:40:39.592643 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0922 01:40:39.596416 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0922 01:40:39.601972 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0922 01:40:39.605605 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0922 01:40:39.605712 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0922 01:40:39.609338 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0922 01:40:39.613232 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0922 01:40:39.617095 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0922 01:40:39.617123 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0922 01:40:39.617223 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0922 01:40:39.620972 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0922 01:40:39.624990 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0922 01:40:39.630274 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0922 01:40:39.632673 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0922 01:40:39.632726 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0922 01:40:39.632773 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0922 01:40:39.632701 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0922 01:40:39.635515 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0922 01:40:39.638973 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0922 01:40:39.641766 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.641987 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.641994 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.642897 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.643228 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.643766 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.664018 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.686481 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.705431 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.722713 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:39.744531 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0922 01:40:51.983031 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-22 01:40:51.982994849 +0000 UTC m=+12.470600403 I0922 01:40:52.624182 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-22 01:40:52.624166814 +0000 UTC m=+13.111772368 I0922 01:40:52.624271 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:40:52.624342 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-22 01:40:52.624332124 +0000 UTC m=+13.111937678 E0922 01:40:52.640412 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 01:40:52.640524 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-22 01:40:52.64051329 +0000 UTC m=+13.128118844 E0922 01:40:52.640549 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 01:40:52.641629 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:40:52.641739 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-22 01:40:52.641725983 +0000 UTC m=+13.129331547 E0922 01:40:52.653747 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0922 01:40:52.653876 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:40:52.653917 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:40:52.653989 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0922 01:40:52.657629 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:40:52.694555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-22 01:40:52.694539862 +0000 UTC m=+13.182145426 I0922 01:40:52.724916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-22 01:40:52.72490106 +0000 UTC m=+13.212506614 I0922 01:40:52.753263 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:40:52.753253664 +0000 UTC m=+13.240859198 I0922 01:40:52.773820 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:40:52.785872 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:40:57.654728 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:40:57.654715372 +0000 UTC m=+18.142320936 I0922 01:41:20.424644 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:41:20.424722 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-22 01:41:20.424712984 +0000 UTC m=+40.912318538 I0922 01:41:20.425286 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-22 01:41:20.425277009 +0000 UTC m=+40.912882573 I0922 01:41:20.432095 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-22 01:41:20.432035528 +0000 UTC m=+40.919641142 I0922 01:41:20.450540 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:41:20.451199 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-22 01:41:20.451187304 +0000 UTC m=+40.938792858 I0922 01:41:20.737717 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:41:20.780791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-22 01:41:20.780778826 +0000 UTC m=+41.268384350 I0922 01:41:20.818178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-22 01:41:20.818163421 +0000 UTC m=+41.305768985 I0922 01:41:20.850978 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:41:20.850965406 +0000 UTC m=+41.338570960 I0922 01:41:20.873361 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:41:20.875578 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:41:20.875565969 +0000 UTC m=+41.363171523 I0922 01:41:20.893770 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:41:20.901707 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:46:08.148871 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-69.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:46:08.148862 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-69.nip.io-tls" condition "Ready" to 2026-09-22 01:46:08.148804057 +0000 UTC m=+328.636409611 I0922 01:46:08.148983 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-69.nip.io-tls" condition "Issuing" to 2026-09-22 01:46:08.148971892 +0000 UTC m=+328.636577456 I0922 01:46:08.161537 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:46:08.161618 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-69.nip.io-tls" condition "Ready" to 2026-09-22 01:46:08.16161155 +0000 UTC m=+328.649217104 I0922 01:46:08.425297 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:46:08.456260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-69.nip.io-tls-1" condition "Approved" to 2026-09-22 01:46:08.456252904 +0000 UTC m=+328.943858438 I0922 01:46:08.472922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-69.nip.io-tls-1" condition "Ready" to 2026-09-22 01:46:08.47291515 +0000 UTC m=+328.960520684 I0922 01:46:08.500408 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-69.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:46:08.500394314 +0000 UTC m=+328.987999868 I0922 01:46:08.519294 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:46:08.519835 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-69.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:46:08.519827819 +0000 UTC m=+329.007433353 I0922 01:46:08.561744 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:47:21.423011 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:47:21.423057 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-22 01:47:21.423051607 +0000 UTC m=+401.910657131 I0922 01:47:21.423375 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 01:47:21.423336397 +0000 UTC m=+401.910942031 I0922 01:47:21.438304 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:47:21.438774 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-22 01:47:21.43874955 +0000 UTC m=+401.926355114 E0922 01:47:21.440505 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0922 01:47:21.440584 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-22 01:47:21.440573982 +0000 UTC m=+401.928179536 E0922 01:47:21.440611 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:47:21.454163 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0922 01:47:21.454673 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:47:21.457502 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0922 01:47:21.457575 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0922 01:47:21.458320 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:47:21.481000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-22 01:47:21.480987829 +0000 UTC m=+401.968593383 I0922 01:47:21.498073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-22 01:47:21.498054838 +0000 UTC m=+401.985660402 I0922 01:47:21.516398 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:47:21.51638772 +0000 UTC m=+402.003993284 I0922 01:47:21.526048 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:47:21.526562 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:47:21.526550799 +0000 UTC m=+402.014156333 I0922 01:47:21.536913 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:47:21.537347 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:47:26.456282 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:47:26.456269182 +0000 UTC m=+406.943874736 I0922 01:48:08.010330 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-22 01:48:08.01027973 +0000 UTC m=+448.497885254 I0922 01:48:08.010491 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:08.011099 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-22 01:48:08.01056078 +0000 UTC m=+448.498166314 I0922 01:48:08.011327 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:08.011349 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-22 01:48:08.011345846 +0000 UTC m=+448.498951370 I0922 01:48:08.011458 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:08.011473 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-22 01:48:08.011470591 +0000 UTC m=+448.499076115 I0922 01:48:08.011662 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-22 01:48:08.011659287 +0000 UTC m=+448.499264811 I0922 01:48:08.012201 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-22 01:48:08.012193824 +0000 UTC m=+448.499799368 I0922 01:48:08.041591 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:08.041731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:08.042537 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-22 01:48:08.042531031 +0000 UTC m=+448.530136575 I0922 01:48:08.047319 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:08.047902 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:08.047940 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-22 01:48:08.047935414 +0000 UTC m=+448.535540938 I0922 01:48:08.047732 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:08.048164 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-22 01:48:08.048153752 +0000 UTC m=+448.535759276 I0922 01:48:08.181725 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:08.209832 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:08.214733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-22 01:48:08.214724126 +0000 UTC m=+448.702329640 I0922 01:48:08.218573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-22 01:48:08.218560556 +0000 UTC m=+448.706166080 I0922 01:48:08.300095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-22 01:48:08.300086884 +0000 UTC m=+448.787692408 I0922 01:48:08.318072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-22 01:48:08.317968729 +0000 UTC m=+448.805574253 I0922 01:48:08.352319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-22 01:48:08.352310551 +0000 UTC m=+448.839916075 I0922 01:48:08.353290 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:08.353284734 +0000 UTC m=+448.840890258 I0922 01:48:08.363207 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:08.363196018 +0000 UTC m=+448.850801532 I0922 01:48:08.363314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-22 01:48:08.363300852 +0000 UTC m=+448.850906376 I0922 01:48:08.594023 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:08.594796 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:08.594786502 +0000 UTC m=+449.082392056 I0922 01:48:08.794253 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:08.797880 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:08.797855433 +0000 UTC m=+449.285460957 I0922 01:48:09.195063 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:09.19505063 +0000 UTC m=+449.682656164 I0922 01:48:09.242892 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:09.242881699 +0000 UTC m=+449.730487233 I0922 01:48:09.290382 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:09.390918 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:09.441068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:09.490627 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:09.664695 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:09.665769 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:09.665758738 +0000 UTC m=+450.153364292 I0922 01:48:09.938920 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:10.040480 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:17.061959 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c797-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:17.062008 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c797-tls" condition "Issuing" to 2026-09-22 01:48:17.061996524 +0000 UTC m=+457.549602088 I0922 01:48:17.062092 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c797-tls" condition "Ready" to 2026-09-22 01:48:17.062071277 +0000 UTC m=+457.549676831 I0922 01:48:17.074085 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c797-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c797-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:17.074202 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c797-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:17.074371 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c797-tls" condition "Issuing" to 2026-09-22 01:48:17.074361573 +0000 UTC m=+457.561967137 I0922 01:48:17.215496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6c797-tls-1" condition "Approved" to 2026-09-22 01:48:17.215469147 +0000 UTC m=+457.703074701 I0922 01:48:17.236146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6c797-tls-1" condition "Ready" to 2026-09-22 01:48:17.236134598 +0000 UTC m=+457.723740122 I0922 01:48:17.269376 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c797-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:17.269348283 +0000 UTC m=+457.756953797 I0922 01:48:17.280738 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c797-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c797-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:17.281762 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c797-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:17.281748994 +0000 UTC m=+457.769354558 I0922 01:48:17.301198 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c797-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c797-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:29.621547 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-22 01:48:29.621533893 +0000 UTC m=+470.109139417 I0922 01:48:29.621992 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:29.622008 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-22 01:48:29.622005338 +0000 UTC m=+470.109610862 I0922 01:48:29.629614 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:29.629762 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:48:29.629814 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-22 01:48:29.629805404 +0000 UTC m=+470.117410938 I0922 01:48:29.978949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-22 01:48:29.978936061 +0000 UTC m=+470.466541595 I0922 01:48:29.989680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-22 01:48:29.989669035 +0000 UTC m=+470.477274569 I0922 01:48:30.016585 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:30.016573681 +0000 UTC m=+470.504179195 I0922 01:48:30.030543 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:30.031100 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:48:30.031093124 +0000 UTC m=+470.518698648 I0922 01:48:30.036623 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:48:30.043549 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:51:55.096151 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:51:55.096268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-22 01:51:55.096254759 +0000 UTC m=+675.583860313 I0922 01:51:55.096305 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-22 01:51:55.096283339 +0000 UTC m=+675.583888893 I0922 01:51:55.109810 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:51:55.109959 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:51:55.110015 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-22 01:51:55.110005449 +0000 UTC m=+675.597611003 I0922 01:51:55.344574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-22 01:51:55.344556873 +0000 UTC m=+675.832162427 I0922 01:51:55.365942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-22 01:51:55.365928348 +0000 UTC m=+675.853533902 I0922 01:51:55.393517 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:51:55.39350221 +0000 UTC m=+675.881107774 I0922 01:51:55.416535 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:52:39.278403 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-22 01:52:39.278391172 +0000 UTC m=+719.765996696 I0922 01:52:39.278737 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:52:39.278766 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-22 01:52:39.278763228 +0000 UTC m=+719.766368752 I0922 01:52:39.297585 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0922 01:52:39.297752 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0922 01:52:39.297782 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-22 01:52:39.297776138 +0000 UTC m=+719.785381652 I0922 01:52:39.728658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-22 01:52:39.728645333 +0000 UTC m=+720.216250857 I0922 01:52:39.747902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-22 01:52:39.747865026 +0000 UTC m=+720.235470580 I0922 01:52:39.785139 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-22 01:52:39.785126575 +0000 UTC m=+720.272732109 I0922 01:52:39.798923 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"