I0811 08:17:47.158291 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0811 08:17:47.158659 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0811 08:17:47.163635 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0811 08:17:47.163679 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0811 08:17:47.163694 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0811 08:17:47.164202 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0811 08:17:47.164250 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0811 08:17:47.164230 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0811 08:17:47.168923 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0811 08:17:47.185319 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0811 08:17:47.193769 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0811 08:17:47.197919 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0811 08:17:47.200418 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0811 08:17:47.206132 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0811 08:17:47.206201 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0811 08:17:47.210152 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0811 08:17:47.212859 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0811 08:17:47.215536 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0811 08:17:47.217610 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0811 08:17:47.217774 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0811 08:17:47.219694 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0811 08:17:47.226131 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0811 08:17:47.228351 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0811 08:17:47.228442 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0811 08:17:47.230335 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0811 08:17:47.230350 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0811 08:17:47.230432 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0811 08:17:47.232417 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0811 08:17:47.234419 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0811 08:17:47.236434 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0811 08:17:47.238431 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0811 08:17:47.240153 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0811 08:17:47.240269 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0811 08:17:47.244792 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0811 08:17:47.250481 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.250518 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.250876 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.250893 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.251168 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.251303 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.262433 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.281785 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.302041 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.323034 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:47.342458 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0811 08:17:58.333519 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-11 08:17:58.333497452 +0000 UTC m=+11.199965322 I0811 08:17:59.041402 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-11 08:17:59.041374718 +0000 UTC m=+11.907842608 I0811 08:17:59.042427 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:17:59.042549 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-11 08:17:59.042538136 +0000 UTC m=+11.909006026 E0811 08:17:59.051101 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 08:17:59.051156 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-11 08:17:59.051129035 +0000 UTC m=+11.917596885 E0811 08:17:59.051187 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 08:17:59.057129 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:17:59.057184 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:17:59.057259 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-11 08:17:59.057195532 +0000 UTC m=+11.923663402 E0811 08:17:59.058646 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0811 08:17:59.058702 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 08:17:59.058714 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 08:17:59.058732 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0811 08:17:59.100382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-11 08:17:59.100367531 +0000 UTC m=+11.966835431 I0811 08:17:59.121778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-11 08:17:59.121769226 +0000 UTC m=+11.988237086 I0811 08:17:59.140485 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:17:59.14047262 +0000 UTC m=+12.006940490 I0811 08:17:59.154780 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:17:59.155161 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:17:59.155153412 +0000 UTC m=+12.021621282 I0811 08:17:59.160039 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:17:59.168266 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:04.059647 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:04.05962908 +0000 UTC m=+16.926096980 I0811 08:18:26.749291 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:26.749548 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-11 08:18:26.749512355 +0000 UTC m=+39.615980245 I0811 08:18:26.749655 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-11 08:18:26.749637322 +0000 UTC m=+39.616105192 I0811 08:18:26.759982 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-11 08:18:26.75996829 +0000 UTC m=+39.626436160 I0811 08:18:26.771685 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:26.771894 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:18:26.772020 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-11 08:18:26.772011285 +0000 UTC m=+39.638479145 I0811 08:18:27.044757 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:27.056927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-11 08:18:27.056909307 +0000 UTC m=+39.923377177 I0811 08:18:27.081170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-11 08:18:27.081134434 +0000 UTC m=+39.947602304 I0811 08:18:27.110601 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:27.110587247 +0000 UTC m=+39.977055127 I0811 08:18:27.128218 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:18:27.129133 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:18:27.129123676 +0000 UTC m=+39.995591566 I0811 08:18:27.150754 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:22:31.420214 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-73.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:22:31.420296 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Issuing" to 2026-08-11 08:22:31.420260013 +0000 UTC m=+284.286727883 I0811 08:22:31.420442 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready" to 2026-08-11 08:22:31.420429994 +0000 UTC m=+284.286897864 I0811 08:22:31.431657 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:22:31.432080 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-73.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:22:31.432123 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Issuing" to 2026-08-11 08:22:31.432118047 +0000 UTC m=+284.298585917 I0811 08:22:31.780500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-73.nip.io-tls-1" condition "Approved" to 2026-08-11 08:22:31.780480086 +0000 UTC m=+284.646947976 I0811 08:22:31.797234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-73.nip.io-tls-1" condition "Ready" to 2026-08-11 08:22:31.797218586 +0000 UTC m=+284.663686486 I0811 08:22:31.817775 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:22:31.817766827 +0000 UTC m=+284.684234697 I0811 08:22:31.831161 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:22:31.831639 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:22:31.83162905 +0000 UTC m=+284.698096910 I0811 08:22:31.842863 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:23:41.018036 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:23:41.018169 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-11 08:23:41.01814344 +0000 UTC m=+353.884611310 I0811 08:23:41.018830 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-11 08:23:41.018820681 +0000 UTC m=+353.885288561 E0811 08:23:41.036679 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 08:23:41.036794 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-11 08:23:41.036785662 +0000 UTC m=+353.903253522 E0811 08:23:41.036825 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0811 08:23:41.043492 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:23:41.044019 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-11 08:23:41.044008222 +0000 UTC m=+353.910476122 E0811 08:23:41.053107 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0811 08:23:41.053338 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 08:23:41.053390 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0811 08:23:41.053429 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0811 08:23:41.066698 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:23:41.091403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-11 08:23:41.091371264 +0000 UTC m=+353.957839144 I0811 08:23:41.106316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-11 08:23:41.106305265 +0000 UTC m=+353.972773125 I0811 08:23:41.125901 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:23:41.125882302 +0000 UTC m=+353.992350172 I0811 08:23:41.143120 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:23:41.145189 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:23:41.145174743 +0000 UTC m=+354.011642633 I0811 08:23:41.157613 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:23:46.054360 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:23:46.054346169 +0000 UTC m=+358.920814069 I0811 08:24:30.206409 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:24:30.206466 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-11 08:24:30.206433996 +0000 UTC m=+403.072901866 I0811 08:24:30.206644 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-11 08:24:30.20662906 +0000 UTC m=+403.073096930 I0811 08:24:30.207577 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:24:30.208217 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-11 08:24:30.208211354 +0000 UTC m=+403.074679214 I0811 08:24:30.207366 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-11 08:24:30.207359756 +0000 UTC m=+403.073827636 I0811 08:24:30.215344 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:24:30.215375 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-11 08:24:30.215367299 +0000 UTC m=+403.081835179 I0811 08:24:30.215561 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-11 08:24:30.215549823 +0000 UTC m=+403.082017683 I0811 08:24:30.238934 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:30.239124 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-11 08:24:30.239110833 +0000 UTC m=+403.105578693 I0811 08:24:30.250274 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:30.252327 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-11 08:24:30.250330267 +0000 UTC m=+403.116798137 I0811 08:24:30.252756 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:30.257856 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:24:30.257922 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-11 08:24:30.257911811 +0000 UTC m=+403.124379701 I0811 08:24:30.507002 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:30.541005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:30.546358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-11 08:24:30.54634546 +0000 UTC m=+403.412813350 I0811 08:24:30.573824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-11 08:24:30.573815536 +0000 UTC m=+403.440283396 I0811 08:24:30.584831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-11 08:24:30.584817664 +0000 UTC m=+403.451285524 I0811 08:24:30.601446 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:30.601435254 +0000 UTC m=+403.467903114 I0811 08:24:30.601496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-11 08:24:30.601486515 +0000 UTC m=+403.467954375 I0811 08:24:30.624322 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:30.645365 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:30.645354025 +0000 UTC m=+403.511821885 I0811 08:24:30.660003 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:30.660814 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:30.66080651 +0000 UTC m=+403.527274360 I0811 08:24:30.889778 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:30.940712 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:31.192732 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:31.246864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-11 08:24:31.246851108 +0000 UTC m=+404.113318968 I0811 08:24:31.298846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-11 08:24:31.298828799 +0000 UTC m=+404.165296699 I0811 08:24:31.797576 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:31.797561155 +0000 UTC m=+404.664029025 I0811 08:24:31.891101 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:31.891851 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:31.891839295 +0000 UTC m=+404.758307175 I0811 08:24:32.091104 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:37.237575 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:24:37.237619 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" condition "Issuing" to 2026-08-11 08:24:37.237608109 +0000 UTC m=+410.104076009 I0811 08:24:37.238148 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" condition "Ready" to 2026-08-11 08:24:37.23813812 +0000 UTC m=+410.104606080 I0811 08:24:37.251694 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-knhnb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:37.251760 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" condition "Ready" to 2026-08-11 08:24:37.251753433 +0000 UTC m=+410.118221303 I0811 08:24:37.431660 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-knhnb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:37.459659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-knhnb-tls-1" condition "Approved" to 2026-08-11 08:24:37.459640094 +0000 UTC m=+410.326107964 I0811 08:24:37.488779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-knhnb-tls-1" condition "Ready" to 2026-08-11 08:24:37.488760441 +0000 UTC m=+410.355228331 I0811 08:24:37.521629 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:37.521611352 +0000 UTC m=+410.388079232 I0811 08:24:37.541283 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-knhnb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:37.592203 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-knhnb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-knhnb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:51.146827 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:24:51.146945 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-11 08:24:51.146923356 +0000 UTC m=+424.013391226 I0811 08:24:51.147521 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-11 08:24:51.14749391 +0000 UTC m=+424.013961770 I0811 08:24:51.159790 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:51.160059 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:24:51.160088 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-11 08:24:51.160080193 +0000 UTC m=+424.026548053 I0811 08:24:51.463644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-11 08:24:51.463617556 +0000 UTC m=+424.330085426 I0811 08:24:51.482348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-11 08:24:51.482331242 +0000 UTC m=+424.348799112 I0811 08:24:51.510162 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:51.510143759 +0000 UTC m=+424.376611629 I0811 08:24:51.526283 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:51.526739 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:51.526729844 +0000 UTC m=+424.393197704 I0811 08:24:51.538155 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:51.552675 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:24:51.553195 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:24:51.55318671 +0000 UTC m=+424.419654570 I0811 08:28:18.031476 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:28:18.031515 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-11 08:28:18.031506523 +0000 UTC m=+630.897974393 I0811 08:28:18.031932 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-11 08:28:18.031912915 +0000 UTC m=+630.898380785 I0811 08:28:18.044828 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:28:18.044895 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:28:18.044913 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-11 08:28:18.04490576 +0000 UTC m=+630.911373630 I0811 08:28:18.180248 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:28:18.206507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-11 08:28:18.206492843 +0000 UTC m=+631.072960733 I0811 08:28:18.224054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-11 08:28:18.224040747 +0000 UTC m=+631.090508607 I0811 08:28:18.255272 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:28:18.255260099 +0000 UTC m=+631.121727969 I0811 08:28:18.274579 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:29:01.338093 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:29:01.338187 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-11 08:29:01.338175557 +0000 UTC m=+674.204643427 I0811 08:29:01.338538 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-11 08:29:01.338519127 +0000 UTC m=+674.204987007 I0811 08:29:01.351441 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:29:01.351794 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0811 08:29:01.351826 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-11 08:29:01.351814348 +0000 UTC m=+674.218282208 I0811 08:29:01.505967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-11 08:29:01.505947622 +0000 UTC m=+674.372415522 I0811 08:29:01.521503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-11 08:29:01.521491573 +0000 UTC m=+674.387959433 I0811 08:29:01.548910 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:29:01.548897512 +0000 UTC m=+674.415365362 I0811 08:29:01.562138 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0811 08:29:01.562572 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-11 08:29:01.562563365 +0000 UTC m=+674.429031225 I0811 08:29:01.579227 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"