I0923 10:25:39.135373 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0923 10:25:39.135566 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0923 10:25:39.140764 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0923 10:25:39.140798 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0923 10:25:39.140812 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0923 10:25:39.141342 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0923 10:25:39.141366 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0923 10:25:39.141531 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0923 10:25:39.146990 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0923 10:25:39.161490 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0923 10:25:39.165004 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0923 10:25:39.165159 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0923 10:25:39.168288 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0923 10:25:39.171332 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0923 10:25:39.177166 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0923 10:25:39.181510 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0923 10:25:39.185517 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0923 10:25:39.187849 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0923 10:25:39.187870 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0923 10:25:39.188004 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0923 10:25:39.190450 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0923 10:25:39.190596 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0923 10:25:39.193429 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0923 10:25:39.198011 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0923 10:25:39.200440 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0923 10:25:39.202767 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0923 10:25:39.205104 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0923 10:25:39.207871 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0923 10:25:39.210226 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0923 10:25:39.210439 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0923 10:25:39.213012 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0923 10:25:39.215436 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0923 10:25:39.215625 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0923 10:25:39.222080 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0923 10:25:39.224875 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.225295 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.225300 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.225891 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.226231 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.248732 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.274231 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.296625 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.320212 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.337820 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:39.358817 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0923 10:25:52.188590 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-23 10:25:52.188558952 +0000 UTC m=+13.080534358 I0923 10:25:52.887347 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-23 10:25:52.887333981 +0000 UTC m=+13.779309387 I0923 10:25:52.888515 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:25:52.888598 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-23 10:25:52.888588041 +0000 UTC m=+13.780563477 E0923 10:25:52.904415 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0923 10:25:52.904603 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-23 10:25:52.904589333 +0000 UTC m=+13.796564739 E0923 10:25:52.904665 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0923 10:25:52.905495 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:25:52.905618 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-23 10:25:52.905607187 +0000 UTC m=+13.797582593 E0923 10:25:52.925622 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0923 10:25:52.926246 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:25:52.926352 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:25:52.926471 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0923 10:25:52.928654 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:25:52.967023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-23 10:25:52.96700955 +0000 UTC m=+13.858984966 I0923 10:25:53.001339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-23 10:25:53.001320799 +0000 UTC m=+13.893296255 I0923 10:25:53.061068 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:25:53.061059417 +0000 UTC m=+13.953034793 I0923 10:25:53.072513 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:25:53.072849 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:25:53.072843225 +0000 UTC m=+13.964818601 I0923 10:25:53.076822 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:25:53.087481 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:25:53.087740 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:25:53.087734239 +0000 UTC m=+13.979709615 I0923 10:25:53.091903 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:25:57.926390 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:25:57.926379154 +0000 UTC m=+18.818354530 I0923 10:26:22.677291 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-23 10:26:22.677185344 +0000 UTC m=+43.569160760 I0923 10:26:22.677331 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:26:22.677525 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-23 10:26:22.677516547 +0000 UTC m=+43.569491953 I0923 10:26:22.688561 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-23 10:26:22.688307135 +0000 UTC m=+43.580282531 I0923 10:26:22.701399 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:26:22.701812 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-23 10:26:22.701802595 +0000 UTC m=+43.593777991 I0923 10:26:23.044613 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:26:23.079164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-23 10:26:23.079150332 +0000 UTC m=+43.971125718 I0923 10:26:23.195349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-23 10:26:23.195333324 +0000 UTC m=+44.087308730 I0923 10:26:23.265903 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:26:23.265891672 +0000 UTC m=+44.157867048 I0923 10:26:23.301956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:26:23.305074 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:26:23.305061169 +0000 UTC m=+44.197036585 I0923 10:26:23.333934 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:26:23.339748 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:31:18.797443 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:31:18.797563 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Issuing" to 2026-09-23 10:31:18.797518779 +0000 UTC m=+339.689494205 I0923 10:31:18.798016 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Ready" to 2026-09-23 10:31:18.797988121 +0000 UTC m=+339.689963537 I0923 10:31:18.813581 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-80.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:31:18.813794 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:31:18.813854 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Issuing" to 2026-09-23 10:31:18.813838119 +0000 UTC m=+339.705813535 I0923 10:31:19.031986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-80.nip.io-tls-1" condition "Approved" to 2026-09-23 10:31:19.031963901 +0000 UTC m=+339.923939317 I0923 10:31:19.051569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-80.nip.io-tls-1" condition "Ready" to 2026-09-23 10:31:19.051557326 +0000 UTC m=+339.943532692 I0923 10:31:19.076856 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-80.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:31:19.076837057 +0000 UTC m=+339.968812443 I0923 10:31:19.092124 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-80.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-80.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:32:26.035441 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:32:26.035509 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-23 10:32:26.035464137 +0000 UTC m=+406.927439573 I0923 10:32:26.035646 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-23 10:32:26.035630446 +0000 UTC m=+406.927605922 E0923 10:32:26.047476 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0923 10:32:26.047530 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-23 10:32:26.047523578 +0000 UTC m=+406.939498954 E0923 10:32:26.047558 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0923 10:32:26.049260 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:32:26.049382 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:32:26.049457 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-23 10:32:26.049444821 +0000 UTC m=+406.941420227 E0923 10:32:26.063727 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0923 10:32:26.063876 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:32:26.063975 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0923 10:32:26.064041 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0923 10:32:26.093856 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:32:26.102368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-23 10:32:26.102348404 +0000 UTC m=+406.994323830 I0923 10:32:26.121221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-23 10:32:26.121180245 +0000 UTC m=+407.013155621 I0923 10:32:26.146518 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:32:26.146503441 +0000 UTC m=+407.038478817 I0923 10:32:26.167807 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:32:26.168121 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:32:26.168114181 +0000 UTC m=+407.060089567 I0923 10:32:26.175011 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:32:26.183921 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:32:31.064208 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:32:31.064194032 +0000 UTC m=+411.956169448 I0923 10:33:12.218107 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-23 10:33:12.218060699 +0000 UTC m=+453.110036075 I0923 10:33:12.218216 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:33:12.218249 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-23 10:33:12.21824439 +0000 UTC m=+453.110219776 I0923 10:33:12.230587 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-23 10:33:12.23057695 +0000 UTC m=+453.122552316 I0923 10:33:12.231043 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:33:12.232875 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-23 10:33:12.232869819 +0000 UTC m=+453.124845225 I0923 10:33:12.233246 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:33:12.233306 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-23 10:33:12.233301993 +0000 UTC m=+453.125277369 I0923 10:33:12.234286 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-23 10:33:12.234273748 +0000 UTC m=+453.126249124 I0923 10:33:12.258034 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:12.258101 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:33:12.258122 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-23 10:33:12.258116593 +0000 UTC m=+453.150091969 I0923 10:33:12.310755 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:12.313073 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:33:12.313081 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:12.313094 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-23 10:33:12.313087382 +0000 UTC m=+453.205062758 I0923 10:33:12.313401 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:33:12.313771 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-23 10:33:12.313440822 +0000 UTC m=+453.205416198 I0923 10:33:12.477402 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:12.479266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-23 10:33:12.47925621 +0000 UTC m=+453.371231596 I0923 10:33:12.495344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-23 10:33:12.495333721 +0000 UTC m=+453.387309097 I0923 10:33:12.500755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-23 10:33:12.500747184 +0000 UTC m=+453.392722560 I0923 10:33:12.547114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-23 10:33:12.54710499 +0000 UTC m=+453.439080366 I0923 10:33:12.592924 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:12.592915777 +0000 UTC m=+453.484891153 I0923 10:33:12.608050 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:12.608036763 +0000 UTC m=+453.500012139 I0923 10:33:12.614269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-23 10:33:12.614256802 +0000 UTC m=+453.506232178 I0923 10:33:12.615927 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:12.616351 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:12.616347459 +0000 UTC m=+453.508322825 I0923 10:33:12.676197 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:12.676900 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:12.67689309 +0000 UTC m=+453.568868476 I0923 10:33:12.732985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-23 10:33:12.732975722 +0000 UTC m=+453.624951098 I0923 10:33:13.025815 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:13.326645 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:13.585354 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:13.627302 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:13.907069 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:13.907031331 +0000 UTC m=+454.799006747 I0923 10:33:13.956105 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:13.957089 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:13.957073186 +0000 UTC m=+454.849048602 I0923 10:33:14.140814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:21.366220 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:33:21.366256 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" condition "Issuing" to 2026-09-23 10:33:21.366248664 +0000 UTC m=+462.258224040 I0923 10:33:21.366753 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" condition "Ready" to 2026-09-23 10:33:21.366748043 +0000 UTC m=+462.258723449 I0923 10:33:21.376142 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-69j4d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:21.376219 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" condition "Ready" to 2026-09-23 10:33:21.376212467 +0000 UTC m=+462.268187843 I0923 10:33:21.643438 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-69j4d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:21.674577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-69j4d-tls-1" condition "Approved" to 2026-09-23 10:33:21.67455468 +0000 UTC m=+462.566530056 I0923 10:33:21.695964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-69j4d-tls-1" condition "Ready" to 2026-09-23 10:33:21.695946078 +0000 UTC m=+462.587921494 I0923 10:33:21.728364 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:21.728348568 +0000 UTC m=+462.620323994 I0923 10:33:21.745899 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-69j4d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:21.746659 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:21.746651201 +0000 UTC m=+462.638626587 I0923 10:33:21.770246 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-69j4d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-69j4d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:35.332685 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:33:35.332779 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-23 10:33:35.332708328 +0000 UTC m=+476.224683694 I0923 10:33:35.333336 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-23 10:33:35.333321402 +0000 UTC m=+476.225296778 I0923 10:33:35.343629 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:35.343723 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-23 10:33:35.343716526 +0000 UTC m=+476.235691902 I0923 10:33:35.503686 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:35.536214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-23 10:33:35.536202484 +0000 UTC m=+476.428177860 I0923 10:33:35.558295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-23 10:33:35.558285625 +0000 UTC m=+476.450261011 I0923 10:33:35.594027 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:35.594014985 +0000 UTC m=+476.485990361 I0923 10:33:35.612774 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:33:35.613757 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:33:35.613749582 +0000 UTC m=+476.505724958 I0923 10:33:35.654482 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:03.055489 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:03.055354 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-23 10:37:03.05533429 +0000 UTC m=+683.947309706 I0923 10:37:03.055609 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-23 10:37:03.055598538 +0000 UTC m=+683.947573954 I0923 10:37:03.070682 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:03.070972 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:03.071054 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-23 10:37:03.071010245 +0000 UTC m=+683.962985651 I0923 10:37:03.334407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-23 10:37:03.334391449 +0000 UTC m=+684.226366835 I0923 10:37:03.352569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-23 10:37:03.352556323 +0000 UTC m=+684.244531709 I0923 10:37:03.384286 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:03.384274181 +0000 UTC m=+684.276249567 I0923 10:37:03.396115 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:03.396570 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:03.396563561 +0000 UTC m=+684.288538937 I0923 10:37:03.401091 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:03.410071 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:46.421265 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0923 10:37:46.421467 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-23 10:37:46.421453191 +0000 UTC m=+727.313428647 I0923 10:37:46.422262 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-23 10:37:46.422251635 +0000 UTC m=+727.314227061 I0923 10:37:46.438504 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:46.438619 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-23 10:37:46.438607563 +0000 UTC m=+727.330582979 I0923 10:37:46.785291 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0923 10:37:46.813439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-23 10:37:46.813429477 +0000 UTC m=+727.705404853 I0923 10:37:46.835189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-23 10:37:46.83517921 +0000 UTC m=+727.727154586 I0923 10:37:46.865151 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-23 10:37:46.865138492 +0000 UTC m=+727.757113898 I0923 10:37:46.887941 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"