I0822 12:52:02.091512 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0822 12:52:02.091647 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0822 12:52:02.094907 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0822 12:52:02.094981 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0822 12:52:02.094990 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0822 12:52:02.095885 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0822 12:52:02.095930 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0822 12:52:02.096170 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0822 12:52:02.098591 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0822 12:52:02.117816 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0822 12:52:02.122454 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0822 12:52:02.124270 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0822 12:52:02.124307 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0822 12:52:02.127408 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0822 12:52:02.132759 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0822 12:52:02.134943 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0822 12:52:02.135055 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0822 12:52:02.137464 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0822 12:52:02.139896 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0822 12:52:02.141785 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0822 12:52:02.146103 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0822 12:52:02.150408 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0822 12:52:02.153887 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0822 12:52:02.156678 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0822 12:52:02.159373 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0822 12:52:02.159404 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0822 12:52:02.159474 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0822 12:52:02.162024 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0822 12:52:02.162042 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0822 12:52:02.162152 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0822 12:52:02.164479 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0822 12:52:02.170174 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0822 12:52:02.172184 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0822 12:52:02.174799 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0822 12:52:02.177454 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.177569 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.178148 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.180023 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.180336 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.198489 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.212170 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.260253 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.278018 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.294487 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:02.309365 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0822 12:52:14.386969 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-22 12:52:14.386932507 +0000 UTC m=+12.322049388 I0822 12:52:15.145868 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-22 12:52:15.14585005 +0000 UTC m=+13.080966911 I0822 12:52:15.146224 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:52:15.146446 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-22 12:52:15.146392138 +0000 UTC m=+13.081508999 E0822 12:52:15.160789 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 12:52:15.161052 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-22 12:52:15.161038909 +0000 UTC m=+13.096155770 E0822 12:52:15.161293 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 12:52:15.161652 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:52:15.161810 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:52:15.161974 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-22 12:52:15.161959302 +0000 UTC m=+13.097076193 E0822 12:52:15.173205 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0822 12:52:15.173403 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 12:52:15.173463 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 12:52:15.173693 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0822 12:52:15.207356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-22 12:52:15.207323936 +0000 UTC m=+13.142440807 I0822 12:52:15.234654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-22 12:52:15.234632377 +0000 UTC m=+13.169749268 I0822 12:52:15.259125 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:52:15.259106845 +0000 UTC m=+13.194223706 I0822 12:52:15.274239 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:52:15.274664 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:52:15.27465471 +0000 UTC m=+13.209771571 I0822 12:52:15.355636 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:52:15.355988 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:52:20.174737 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:52:20.174722477 +0000 UTC m=+18.109839358 I0822 12:52:45.796701 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-22 12:52:45.796678206 +0000 UTC m=+43.731795057 I0822 12:52:45.797043 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:52:45.797083 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-22 12:52:45.797080422 +0000 UTC m=+43.732197273 I0822 12:52:45.807080 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-22 12:52:45.807067945 +0000 UTC m=+43.742184806 I0822 12:52:45.819925 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:52:45.829006 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-22 12:52:45.828995011 +0000 UTC m=+43.764111872 I0822 12:52:45.994775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:52:46.027848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-22 12:52:46.027829662 +0000 UTC m=+43.962946553 I0822 12:52:46.055794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-22 12:52:46.055778754 +0000 UTC m=+43.990895605 I0822 12:52:46.080102 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:52:46.080088034 +0000 UTC m=+44.015204905 I0822 12:52:46.098418 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:52:46.098971 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:52:46.098962705 +0000 UTC m=+44.034079566 I0822 12:52:46.125329 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:56:54.817319 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready" to 2026-08-22 12:56:54.817298403 +0000 UTC m=+292.752415254 I0822 12:56:54.817362 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-138.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:56:54.817473 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Issuing" to 2026-08-22 12:56:54.817457826 +0000 UTC m=+292.752574747 I0822 12:56:54.835084 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:56:54.835309 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready" to 2026-08-22 12:56:54.835296466 +0000 UTC m=+292.770413357 I0822 12:56:55.021833 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:56:55.058233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-138.nip.io-tls-1" condition "Approved" to 2026-08-22 12:56:55.058215394 +0000 UTC m=+292.993332275 I0822 12:56:55.074549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-138.nip.io-tls-1" condition "Ready" to 2026-08-22 12:56:55.07453173 +0000 UTC m=+293.009648621 I0822 12:56:55.097034 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:56:55.09702632 +0000 UTC m=+293.032143181 I0822 12:56:55.111067 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:56:55.111522 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:56:55.111512416 +0000 UTC m=+293.046629277 I0822 12:56:55.119160 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:56:55.127089 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:57:59.066292 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-22 12:57:59.066252985 +0000 UTC m=+357.001369836 I0822 12:57:59.066557 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:57:59.066595 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-22 12:57:59.066584972 +0000 UTC m=+357.001701833 E0822 12:57:59.077885 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 12:57:59.077959 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-22 12:57:59.077950677 +0000 UTC m=+357.013067538 E0822 12:57:59.077984 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0822 12:57:59.079642 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:57:59.079702 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-22 12:57:59.079696532 +0000 UTC m=+357.014813393 E0822 12:57:59.086708 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0822 12:57:59.086798 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 12:57:59.086829 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0822 12:57:59.086862 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0822 12:57:59.099964 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:57:59.122362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-22 12:57:59.122346407 +0000 UTC m=+357.057463258 I0822 12:57:59.136764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-22 12:57:59.136749932 +0000 UTC m=+357.071866783 I0822 12:57:59.156776 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:57:59.156758128 +0000 UTC m=+357.091874979 I0822 12:57:59.167622 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:57:59.168759 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:57:59.168748816 +0000 UTC m=+357.103865657 I0822 12:57:59.183354 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:04.087805 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:58:04.087788395 +0000 UTC m=+362.022905276 I0822 12:58:45.319838 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:58:45.319896 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-22 12:58:45.319886471 +0000 UTC m=+403.255003322 I0822 12:58:45.320324 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-22 12:58:45.320318209 +0000 UTC m=+403.255435060 I0822 12:58:45.320627 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-22 12:58:45.320621805 +0000 UTC m=+403.255738686 I0822 12:58:45.320680 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:58:45.320746 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-22 12:58:45.320738727 +0000 UTC m=+403.255855578 I0822 12:58:45.332167 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:58:45.332210 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 12:58:45.332202254 +0000 UTC m=+403.267319115 I0822 12:58:45.332508 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-22 12:58:45.332492769 +0000 UTC m=+403.267609620 I0822 12:58:45.356061 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:45.379467 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:45.379561 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-22 12:58:45.379554158 +0000 UTC m=+403.314670999 I0822 12:58:45.379747 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-22 12:58:45.379732551 +0000 UTC m=+403.314849392 I0822 12:58:45.391550 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:45.395470 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:58:45.395520 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-22 12:58:45.395512769 +0000 UTC m=+403.330629620 I0822 12:58:45.633334 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:45.664961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-22 12:58:45.664948096 +0000 UTC m=+403.600064947 I0822 12:58:45.691219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-22 12:58:45.691209041 +0000 UTC m=+403.626325892 I0822 12:58:45.697203 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:45.724417 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:58:45.724400908 +0000 UTC m=+403.659517759 I0822 12:58:45.744210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-22 12:58:45.744199322 +0000 UTC m=+403.679316173 I0822 12:58:45.754488 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:45.769719 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:45.775816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-22 12:58:45.775805799 +0000 UTC m=+403.710922640 I0822 12:58:45.800662 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:58:45.800650768 +0000 UTC m=+403.735767629 I0822 12:58:45.862361 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:45.862907 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:58:45.862897583 +0000 UTC m=+403.798014444 I0822 12:58:45.910919 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:46.111392 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:46.361737 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:46.420214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-22 12:58:46.420193847 +0000 UTC m=+404.355310708 I0822 12:58:46.766776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-22 12:58:46.766758055 +0000 UTC m=+404.701874946 I0822 12:58:46.965472 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:58:46.965457203 +0000 UTC m=+404.900574084 I0822 12:58:47.060818 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:53.699969 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:58:53.700142 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" condition "Issuing" to 2026-08-22 12:58:53.700031362 +0000 UTC m=+411.635148223 I0822 12:58:53.700127 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" condition "Ready" to 2026-08-22 12:58:53.699604264 +0000 UTC m=+411.634721125 I0822 12:58:53.709974 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:53.710067 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:58:53.710089 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" condition "Issuing" to 2026-08-22 12:58:53.710083741 +0000 UTC m=+411.645200602 I0822 12:58:54.012671 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:54.023990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls-1" condition "Approved" to 2026-08-22 12:58:54.023960395 +0000 UTC m=+411.959077256 I0822 12:58:54.041629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls-1" condition "Ready" to 2026-08-22 12:58:54.041619806 +0000 UTC m=+411.976736647 I0822 12:58:54.068498 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:58:54.06848362 +0000 UTC m=+412.003600481 I0822 12:58:54.091409 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:54.093394 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:58:54.093376716 +0000 UTC m=+412.028493597 I0822 12:58:54.098512 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:58:54.107162 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c4gw6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:59:06.944696 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 12:59:06.944746 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-22 12:59:06.944735068 +0000 UTC m=+424.879851929 I0822 12:59:06.944856 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 12:59:06.944697098 +0000 UTC m=+424.879813959 I0822 12:59:06.960065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:59:06.960290 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-22 12:59:06.960277877 +0000 UTC m=+424.895394728 I0822 12:59:07.382065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 12:59:07.418521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-22 12:59:07.418503173 +0000 UTC m=+425.353620024 I0822 12:59:07.434206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-22 12:59:07.434195574 +0000 UTC m=+425.369312425 I0822 12:59:07.465820 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 12:59:07.465807421 +0000 UTC m=+425.400924282 I0822 12:59:07.483931 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:02:24.297565 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-22 13:02:24.297535691 +0000 UTC m=+622.232652572 I0822 13:02:24.298082 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 13:02:24.298183 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 13:02:24.298150984 +0000 UTC m=+622.233267875 I0822 13:02:24.307981 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:02:24.308066 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 13:02:24.308162 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-22 13:02:24.30815368 +0000 UTC m=+622.243270571 I0822 13:02:24.477471 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:02:24.500390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-22 13:02:24.50037195 +0000 UTC m=+622.435488811 I0822 13:02:24.515913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-22 13:02:24.515903389 +0000 UTC m=+622.451020230 I0822 13:02:24.539956 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 13:02:24.539943098 +0000 UTC m=+622.475059959 I0822 13:02:24.551788 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:02:24.552554 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 13:02:24.552548099 +0000 UTC m=+622.487664950 I0822 13:02:24.568547 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:03:07.604302 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-22 13:03:07.604268024 +0000 UTC m=+665.539384885 I0822 13:03:07.604338 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 13:03:07.604381 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 13:03:07.604375657 +0000 UTC m=+665.539492518 I0822 13:03:07.619677 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:03:07.619784 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0822 13:03:07.619819 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-22 13:03:07.61980804 +0000 UTC m=+665.554924921 I0822 13:03:07.912071 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:03:07.924884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-22 13:03:07.924870718 +0000 UTC m=+665.859987589 I0822 13:03:07.941292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-22 13:03:07.941277854 +0000 UTC m=+665.876394725 I0822 13:03:07.962631 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 13:03:07.962616057 +0000 UTC m=+665.897732908 I0822 13:03:07.979278 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:03:07.980072 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 13:03:07.980065398 +0000 UTC m=+665.915182259 I0822 13:03:08.000244 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0822 13:03:08.000970 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-22 13:03:08.000961177 +0000 UTC m=+665.936078058