I0814 08:58:30.695526 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0814 08:58:30.695816 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0814 08:58:30.700204 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0814 08:58:30.700321 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0814 08:58:30.700334 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0814 08:58:30.700719 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0814 08:58:30.700753 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0814 08:58:30.700888 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0814 08:58:30.704422 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0814 08:58:30.721608 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0814 08:58:30.727922 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0814 08:58:30.730201 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0814 08:58:30.732943 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0814 08:58:30.735636 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0814 08:58:30.740182 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0814 08:58:30.745882 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0814 08:58:30.750121 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0814 08:58:30.750275 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0814 08:58:30.752252 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0814 08:58:30.754242 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0814 08:58:30.756100 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0814 08:58:30.756274 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0814 08:58:30.757947 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0814 08:58:30.762649 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0814 08:58:30.762685 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0814 08:58:30.762755 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0814 08:58:30.765757 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0814 08:58:30.767744 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0814 08:58:30.769978 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0814 08:58:30.772173 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0814 08:58:30.772195 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0814 08:58:30.772262 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0814 08:58:30.774724 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0814 08:58:30.778598 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0814 08:58:30.785316 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.785786 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.785860 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.786125 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.786554 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.786598 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.786614 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.788978 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.789113 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.789420 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:30.789442 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0814 08:58:46.669581 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-14 08:58:46.669538202 +0000 UTC m=+16.000299393 I0814 08:58:47.389573 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-14 08:58:47.389561192 +0000 UTC m=+16.720322353 I0814 08:58:47.390096 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 08:58:47.390285 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-14 08:58:47.390270123 +0000 UTC m=+16.721031304 E0814 08:58:47.422455 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0814 08:58:47.422523 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-14 08:58:47.422510805 +0000 UTC m=+16.753271996 E0814 08:58:47.423014 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0814 08:58:47.425408 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0814 08:58:47.425497 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 08:58:47.425548 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-14 08:58:47.425525322 +0000 UTC m=+16.756286523 E0814 08:58:47.433004 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0814 08:58:47.433124 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0814 08:58:47.433152 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0814 08:58:47.433182 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0814 08:58:47.527820 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0814 08:58:47.543690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-14 08:58:47.543678978 +0000 UTC m=+16.874440139 I0814 08:58:47.578053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-14 08:58:47.578037662 +0000 UTC m=+16.908798853 I0814 08:58:48.262858 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 08:58:48.262839982 +0000 UTC m=+17.593601173 I0814 08:58:48.305327 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0814 08:58:52.433458 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 08:58:52.433441227 +0000 UTC m=+21.764202408 I0814 08:59:24.294280 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 08:59:24.294346 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-14 08:59:24.294336436 +0000 UTC m=+53.625097597 I0814 08:59:24.294719 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-14 08:59:24.294153712 +0000 UTC m=+53.624914873 I0814 08:59:24.319512 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-14 08:59:24.319499728 +0000 UTC m=+53.650260919 I0814 08:59:24.322667 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0814 08:59:24.322795 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 08:59:24.322842 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-14 08:59:24.322832842 +0000 UTC m=+53.653594003 I0814 08:59:24.619874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-14 08:59:24.61986305 +0000 UTC m=+53.950624201 I0814 08:59:24.659103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-14 08:59:24.659087175 +0000 UTC m=+53.989848326 I0814 08:59:24.709770 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 08:59:24.709758267 +0000 UTC m=+54.040519438 I0814 08:59:24.732855 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0814 08:59:24.735915 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 08:59:24.735903714 +0000 UTC m=+54.066664875 I0814 08:59:24.755619 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0814 08:59:24.756128 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 08:59:24.756119091 +0000 UTC m=+54.086880252 I0814 08:59:24.767044 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:05:24.565087 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-215.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:05:24.565085 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-215.nip.io-tls" condition "Ready" to 2026-08-14 09:05:24.565062593 +0000 UTC m=+413.895823764 I0814 09:05:24.565142 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-215.nip.io-tls" condition "Issuing" to 2026-08-14 09:05:24.565135524 +0000 UTC m=+413.895896685 I0814 09:05:24.618463 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-215.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-215.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:05:24.618552 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-215.nip.io-tls" condition "Ready" to 2026-08-14 09:05:24.618541398 +0000 UTC m=+413.949302589 I0814 09:05:24.797663 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-215.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-215.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:05:24.885907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-215.nip.io-tls-1" condition "Approved" to 2026-08-14 09:05:24.885886678 +0000 UTC m=+414.216647889 I0814 09:05:25.014702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-215.nip.io-tls-1" condition "Ready" to 2026-08-14 09:05:25.014691013 +0000 UTC m=+414.345452174 I0814 09:05:25.161868 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-215.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:05:25.161857672 +0000 UTC m=+414.492618833 I0814 09:05:25.362120 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-215.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-215.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:05:25.362751 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-215.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:05:25.362743599 +0000 UTC m=+414.693504760 I0814 09:05:25.440881 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-215.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-215.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:06:34.220470 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-14 09:06:34.220416414 +0000 UTC m=+483.551177615 I0814 09:06:34.221172 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:06:34.221211 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-14 09:06:34.221201642 +0000 UTC m=+483.551962833 I0814 09:06:34.257682 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:06:34.257787 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:06:34.257808 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-14 09:06:34.257801873 +0000 UTC m=+483.588563024 E0814 09:06:34.268590 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0814 09:06:34.268646 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-14 09:06:34.268638614 +0000 UTC m=+483.599399775 E0814 09:06:34.268813 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0814 09:06:34.287430 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0814 09:06:34.287527 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0814 09:06:34.287563 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0814 09:06:34.287603 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0814 09:06:34.337521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-14 09:06:34.337503538 +0000 UTC m=+483.668264729 I0814 09:06:34.388318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-14 09:06:34.388298291 +0000 UTC m=+483.719059492 I0814 09:06:34.424373 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:06:34.424360432 +0000 UTC m=+483.755121593 I0814 09:06:34.446769 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:06:39.288526 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:06:39.288512642 +0000 UTC m=+488.619273833 I0814 09:07:23.032244 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:07:23.032282 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-14 09:07:23.032267555 +0000 UTC m=+532.363028706 I0814 09:07:23.032429 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-14 09:07:23.03242332 +0000 UTC m=+532.363184471 I0814 09:07:23.032561 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-14 09:07:23.032557224 +0000 UTC m=+532.363318375 I0814 09:07:23.032797 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-14 09:07:23.032786982 +0000 UTC m=+532.363548133 I0814 09:07:23.032901 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:07:23.032927 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-14 09:07:23.032923786 +0000 UTC m=+532.363684937 I0814 09:07:23.033067 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:07:23.033088 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-14 09:07:23.033084711 +0000 UTC m=+532.363845852 I0814 09:07:23.068422 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:23.068492 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:07:23.069736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:23.071938 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:23.072104 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:07:23.072140 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-14 09:07:23.072132317 +0000 UTC m=+532.402893478 I0814 09:07:23.072777 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-14 09:07:23.072769358 +0000 UTC m=+532.403530519 I0814 09:07:23.073030 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-14 09:07:23.068639933 +0000 UTC m=+532.399401084 I0814 09:07:23.318096 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:23.370104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-14 09:07:23.37009289 +0000 UTC m=+532.700854051 I0814 09:07:23.404000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-14 09:07:23.403964437 +0000 UTC m=+532.734725578 I0814 09:07:23.451642 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:23.451627924 +0000 UTC m=+532.782389075 I0814 09:07:23.486601 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:23.487939 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:23.48793094 +0000 UTC m=+532.818692091 I0814 09:07:23.492464 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:23.502366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-14 09:07:23.502356541 +0000 UTC m=+532.833117692 I0814 09:07:23.505427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-14 09:07:23.505419641 +0000 UTC m=+532.836180792 I0814 09:07:23.512127 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:23.512609 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:23.512601736 +0000 UTC m=+532.843362897 I0814 09:07:23.522663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-14 09:07:23.522652174 +0000 UTC m=+532.853413325 I0814 09:07:23.524260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-14 09:07:23.524186984 +0000 UTC m=+532.854948155 I0814 09:07:24.061438 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:24.06142677 +0000 UTC m=+533.392187921 I0814 09:07:24.152803 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:24.152746428 +0000 UTC m=+533.483507579 I0814 09:07:24.252233 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:24.252907 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:24.252899683 +0000 UTC m=+533.583660834 I0814 09:07:24.352091 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:24.353702 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:24.35369367 +0000 UTC m=+533.684454821 I0814 09:07:24.653350 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:24.753741 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:35.048618 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" condition "Ready" to 2026-08-14 09:07:35.048578721 +0000 UTC m=+544.379339882 I0814 09:07:35.049155 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:07:35.049187 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" condition "Issuing" to 2026-08-14 09:07:35.04918184 +0000 UTC m=+544.379943001 I0814 09:07:35.061470 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:35.061549 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" condition "Ready" to 2026-08-14 09:07:35.061541894 +0000 UTC m=+544.392303045 I0814 09:07:35.181742 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:35.245510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls-1" condition "Approved" to 2026-08-14 09:07:35.245498668 +0000 UTC m=+544.576259819 I0814 09:07:35.268009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls-1" condition "Ready" to 2026-08-14 09:07:35.267994046 +0000 UTC m=+544.598755207 I0814 09:07:35.291658 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:35.291649611 +0000 UTC m=+544.622410772 I0814 09:07:35.306782 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:35.307300 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:35.307295421 +0000 UTC m=+544.638056572 I0814 09:07:35.325257 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:35.328651 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l4qz5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:52.418545 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:07:52.418604 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-14 09:07:52.418585844 +0000 UTC m=+561.749347005 I0814 09:07:52.419484 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-14 09:07:52.419474582 +0000 UTC m=+561.750235773 I0814 09:07:52.435135 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:52.435254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-14 09:07:52.435243789 +0000 UTC m=+561.766004980 I0814 09:07:52.666812 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:52.703176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-14 09:07:52.703160197 +0000 UTC m=+562.033921358 I0814 09:07:52.720705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-14 09:07:52.720678979 +0000 UTC m=+562.051440140 I0814 09:07:52.752647 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:52.752635248 +0000 UTC m=+562.083396399 I0814 09:07:52.770789 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:07:52.771328 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:07:52.771319976 +0000 UTC m=+562.102081127 I0814 09:07:52.791824 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:11:19.120831 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:11:19.120934 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-14 09:11:19.120920377 +0000 UTC m=+768.451681558 I0814 09:11:19.121141 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-14 09:11:19.120980308 +0000 UTC m=+768.451741489 I0814 09:11:19.136939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:11:19.137041 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-14 09:11:19.137030426 +0000 UTC m=+768.467791607 I0814 09:11:19.395509 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:11:19.437752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-14 09:11:19.437740604 +0000 UTC m=+768.768501755 I0814 09:11:19.454140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-14 09:11:19.45413153 +0000 UTC m=+768.784892681 I0814 09:11:19.487083 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:11:19.487070546 +0000 UTC m=+768.817831707 I0814 09:11:19.502412 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:11:19.503022 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:11:19.503015401 +0000 UTC m=+768.833776552 I0814 09:11:19.508082 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:11:19.523035 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:12:10.355721 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-14 09:12:10.355698353 +0000 UTC m=+819.686459554 I0814 09:12:10.355719 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0814 09:12:10.355985 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-14 09:12:10.355971548 +0000 UTC m=+819.686732719 I0814 09:12:10.367243 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:12:10.368989 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-14 09:12:10.368972232 +0000 UTC m=+819.699733433 I0814 09:12:10.553229 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:12:10.592993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-14 09:12:10.59297141 +0000 UTC m=+819.923732561 I0814 09:12:10.609981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-14 09:12:10.60997151 +0000 UTC m=+819.940732651 I0814 09:12:10.643167 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:12:10.643153383 +0000 UTC m=+819.973914544 I0814 09:12:10.657821 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:12:10.658477 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-14 09:12:10.658468856 +0000 UTC m=+819.989230007 I0814 09:12:10.663250 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0814 09:12:10.674387 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"