I0825 19:06:12.142689 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0825 19:06:12.143300 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0825 19:06:12.148882 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0825 19:06:12.148900 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0825 19:06:12.148908 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0825 19:06:12.149320 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0825 19:06:12.149438 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0825 19:06:12.149621 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0825 19:06:12.151443 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0825 19:06:12.167162 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0825 19:06:12.171131 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0825 19:06:12.171207 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0825 19:06:12.174223 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0825 19:06:12.177484 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0825 19:06:12.183046 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0825 19:06:12.185060 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0825 19:06:12.186985 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0825 19:06:12.189047 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0825 19:06:12.191074 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0825 19:06:12.193365 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0825 19:06:12.200265 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0825 19:06:12.200391 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0825 19:06:12.204316 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0825 19:06:12.206169 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0825 19:06:12.206184 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0825 19:06:12.206190 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0825 19:06:12.206304 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0825 19:06:12.208334 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0825 19:06:12.210062 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0825 19:06:12.211656 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0825 19:06:12.211861 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0825 19:06:12.213536 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0825 19:06:12.218618 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0825 19:06:12.222101 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0825 19:06:12.225380 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.225523 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.225407 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.225791 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.226796 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.227240 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.248270 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.265673 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.284889 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.303102 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:12.320770 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0825 19:06:29.774494 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-25 19:06:29.77446209 +0000 UTC m=+17.655551051 I0825 19:06:30.774921 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:06:30.774990 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-25 19:06:30.774979988 +0000 UTC m=+18.656068959 I0825 19:06:30.775646 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-25 19:06:30.775636434 +0000 UTC m=+18.656725395 E0825 19:06:30.840560 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0825 19:06:30.840633 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-25 19:06:30.840625109 +0000 UTC m=+18.721714050 E0825 19:06:30.840654 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0825 19:06:30.841844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:06:30.842140 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:06:30.842587 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-25 19:06:30.842575326 +0000 UTC m=+18.723664297 E0825 19:06:30.918113 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0825 19:06:30.918633 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:06:30.918702 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:06:30.918854 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0825 19:06:31.140253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-25 19:06:31.140235791 +0000 UTC m=+19.021324762 I0825 19:06:31.203761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-25 19:06:31.20373947 +0000 UTC m=+19.084828431 I0825 19:06:31.279241 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:06:31.279230685 +0000 UTC m=+19.160319616 I0825 19:06:31.299949 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:06:31.300571 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:06:31.300555393 +0000 UTC m=+19.181644364 I0825 19:06:31.323414 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:06:35.918614 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:06:35.918593856 +0000 UTC m=+23.799682817 I0825 19:07:19.772609 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-25 19:07:19.772585884 +0000 UTC m=+67.653674825 I0825 19:07:19.773830 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:07:19.773941 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-25 19:07:19.773931196 +0000 UTC m=+67.655020147 I0825 19:07:19.786594 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-25 19:07:19.786585213 +0000 UTC m=+67.667674144 I0825 19:07:19.794497 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:07:19.794683 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:07:19.795470 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-25 19:07:19.795459894 +0000 UTC m=+67.676548875 I0825 19:07:20.051862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-25 19:07:20.051852491 +0000 UTC m=+67.932941422 I0825 19:07:20.074102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-25 19:07:20.074088844 +0000 UTC m=+67.955177785 I0825 19:07:20.101729 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:07:20.101716836 +0000 UTC m=+67.982805777 I0825 19:07:20.121302 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:07:20.124123 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:07:20.1241159 +0000 UTC m=+68.005204831 I0825 19:07:20.134930 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:07:20.139612 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:43.124287 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-124.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:12:43.124271 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Ready" to 2026-08-25 19:12:43.124243686 +0000 UTC m=+391.005332617 I0825 19:12:43.124324 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Issuing" to 2026-08-25 19:12:43.12431818 +0000 UTC m=+391.005407111 I0825 19:12:43.136610 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:43.136804 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-124.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:12:43.136882 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Issuing" to 2026-08-25 19:12:43.13686963 +0000 UTC m=+391.017958601 I0825 19:12:43.373221 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:43.384953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-124.nip.io-tls-1" condition "Approved" to 2026-08-25 19:12:43.384941394 +0000 UTC m=+391.266030335 I0825 19:12:43.398095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-124.nip.io-tls-1" condition "Ready" to 2026-08-25 19:12:43.398086706 +0000 UTC m=+391.279175637 I0825 19:12:43.423780 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:12:43.423764119 +0000 UTC m=+391.304853070 I0825 19:12:43.435745 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:43.436877 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:12:43.4368676 +0000 UTC m=+391.317956541 I0825 19:12:43.443277 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:12:43.450966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:48.384313 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:48.384478 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-25 19:13:48.384425306 +0000 UTC m=+456.265514247 I0825 19:13:48.385097 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-25 19:13:48.384375114 +0000 UTC m=+456.265464075 I0825 19:13:48.396745 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:48.396819 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:13:48.396845 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-25 19:13:48.396836424 +0000 UTC m=+456.277925355 E0825 19:13:48.399154 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0825 19:13:48.399197 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-25 19:13:48.39919215 +0000 UTC m=+456.280281071 E0825 19:13:48.399209 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:13:48.410411 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0825 19:13:48.411516 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:13:48.411560 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0825 19:13:48.411586 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0825 19:13:48.429643 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:48.436751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-25 19:13:48.43673906 +0000 UTC m=+456.317828001 I0825 19:13:48.451010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-25 19:13:48.450994204 +0000 UTC m=+456.332083155 I0825 19:13:48.475780 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:48.475740255 +0000 UTC m=+456.356829216 I0825 19:13:48.491864 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:48.537093 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:13:53.411916 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:13:53.41189854 +0000 UTC m=+461.292987511 I0825 19:14:34.614982 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:14:34.615051 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-25 19:14:34.615019925 +0000 UTC m=+502.496108856 I0825 19:14:34.615338 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-25 19:14:34.615332504 +0000 UTC m=+502.496421435 I0825 19:14:34.641007 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-25 19:14:34.640994187 +0000 UTC m=+502.522083118 I0825 19:14:34.641517 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:14:34.641534 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-25 19:14:34.641531419 +0000 UTC m=+502.522620340 I0825 19:14:34.644656 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:14:34.644688 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-25 19:14:34.644680548 +0000 UTC m=+502.525769479 I0825 19:14:34.645072 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-25 19:14:34.645061312 +0000 UTC m=+502.526150253 I0825 19:14:34.666748 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:34.666844 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:14:34.666881 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-25 19:14:34.666872733 +0000 UTC m=+502.547961674 I0825 19:14:34.667051 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:34.667076 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:34.667174 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:14:34.667250 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-25 19:14:34.667240864 +0000 UTC m=+502.548329815 I0825 19:14:34.674210 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:14:34.675788 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-25 19:14:34.675776598 +0000 UTC m=+502.556865579 I0825 19:14:34.936047 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:34.945948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-25 19:14:34.945937824 +0000 UTC m=+502.827026765 I0825 19:14:34.969315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-25 19:14:34.969305898 +0000 UTC m=+502.850394819 I0825 19:14:34.977647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-25 19:14:34.9776403 +0000 UTC m=+502.858729221 I0825 19:14:34.983220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-25 19:14:34.983215585 +0000 UTC m=+502.864304516 I0825 19:14:35.006282 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:35.006275101 +0000 UTC m=+502.887364032 I0825 19:14:35.011142 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:35.011137644 +0000 UTC m=+502.892226575 I0825 19:14:35.029073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:35.029826 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:35.029820259 +0000 UTC m=+502.910909200 I0825 19:14:35.030592 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:35.044263 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:35.044255087 +0000 UTC m=+502.925344008 I0825 19:14:35.053945 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:35.202370 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:35.255646 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:35.550264 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:35.656597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-25 19:14:35.656584644 +0000 UTC m=+503.537673585 I0825 19:14:35.707172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-25 19:14:35.707163477 +0000 UTC m=+503.588252408 I0825 19:14:36.156738 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:36.156727026 +0000 UTC m=+504.037815957 I0825 19:14:36.250514 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:36.251057 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:36.251049275 +0000 UTC m=+504.132138216 I0825 19:14:36.450225 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:43.754859 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" condition "Ready" to 2026-08-25 19:14:43.754826183 +0000 UTC m=+511.635915124 I0825 19:14:43.755028 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:14:43.755100 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" condition "Issuing" to 2026-08-25 19:14:43.755084178 +0000 UTC m=+511.636173139 I0825 19:14:43.766674 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-27mq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:43.766756 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" condition "Ready" to 2026-08-25 19:14:43.766747804 +0000 UTC m=+511.647836745 I0825 19:14:43.993410 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-27mq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:44.022401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-27mq6-tls-1" condition "Approved" to 2026-08-25 19:14:44.02238139 +0000 UTC m=+511.903470351 I0825 19:14:44.043007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-27mq6-tls-1" condition "Ready" to 2026-08-25 19:14:44.042995417 +0000 UTC m=+511.924084358 I0825 19:14:44.065285 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:44.065272226 +0000 UTC m=+511.946361167 I0825 19:14:44.076845 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-27mq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:44.077712 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:44.077703309 +0000 UTC m=+511.958792280 I0825 19:14:44.090274 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-27mq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:44.091143 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-27mq6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:14:44.091704 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-27mq6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:14:44.091697666 +0000 UTC m=+511.972786597 I0825 19:15:08.993131 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-25 19:15:08.993110402 +0000 UTC m=+536.874199333 I0825 19:15:08.993546 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:15:08.993595 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-25 19:15:08.993585071 +0000 UTC m=+536.874674012 I0825 19:15:09.047134 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:15:09.047432 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:15:09.047479 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-25 19:15:09.047468361 +0000 UTC m=+536.928557312 I0825 19:15:10.314883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-25 19:15:10.314869592 +0000 UTC m=+538.195958543 I0825 19:15:10.347073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-25 19:15:10.347063179 +0000 UTC m=+538.228152120 I0825 19:15:10.481026 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:15:10.481014571 +0000 UTC m=+538.362103512 I0825 19:15:10.787043 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" E0825 19:18:11.669349 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0825 19:20:03.326126 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0825 19:20:11.034237 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out I0825 19:20:22.542657 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:20:22.542703 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-25 19:20:22.542696377 +0000 UTC m=+850.423785308 I0825 19:20:22.542795 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-25 19:20:22.542782319 +0000 UTC m=+850.423871280 I0825 19:20:22.556918 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:20:22.557171 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:20:22.557260 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-25 19:20:22.557250648 +0000 UTC m=+850.438339609 I0825 19:20:22.763756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-25 19:20:22.763738755 +0000 UTC m=+850.644827716 I0825 19:20:22.782499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-25 19:20:22.782488888 +0000 UTC m=+850.663577829 I0825 19:20:22.822020 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:20:22.822009753 +0000 UTC m=+850.703098694 I0825 19:20:22.841489 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" E0825 19:20:26.039013 1 leaderelection.go:340] Failed to update lock optimitically: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again, falling back to slow path I0825 19:21:33.394045 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0825 19:21:33.394185 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-25 19:21:33.394175862 +0000 UTC m=+921.275264803 I0825 19:21:33.394665 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-25 19:21:33.394658265 +0000 UTC m=+921.275747216 I0825 19:21:33.412286 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:21:33.415809 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-25 19:21:33.415793306 +0000 UTC m=+921.296882247 I0825 19:21:33.580267 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0825 19:21:33.630040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-25 19:21:33.630028988 +0000 UTC m=+921.511117929 I0825 19:21:33.657307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-25 19:21:33.65729618 +0000 UTC m=+921.538385131 I0825 19:21:33.689464 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-25 19:21:33.689453208 +0000 UTC m=+921.570542139 I0825 19:21:33.709945 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"