I0918 01:32:21.273448 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0918 01:32:21.273926 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0918 01:32:21.279031 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0918 01:32:21.279065 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0918 01:32:21.279079 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0918 01:32:21.279743 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0918 01:32:21.279775 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0918 01:32:21.279948 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0918 01:32:21.284152 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0918 01:32:21.301193 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0918 01:32:21.310761 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0918 01:32:21.310845 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0918 01:32:21.310842 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0918 01:32:21.315532 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0918 01:32:21.319308 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0918 01:32:21.323186 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0918 01:32:21.329876 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0918 01:32:21.332307 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0918 01:32:21.334448 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0918 01:32:21.336559 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0918 01:32:21.338827 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0918 01:32:21.340981 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0918 01:32:21.341154 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0918 01:32:21.345145 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0918 01:32:21.348241 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0918 01:32:21.350770 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0918 01:32:21.353202 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0918 01:32:21.355025 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0918 01:32:21.356977 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0918 01:32:21.360967 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0918 01:32:21.363190 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0918 01:32:21.363220 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0918 01:32:21.363226 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0918 01:32:21.363515 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0918 01:32:21.370911 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.372553 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.373156 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.373705 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.376240 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.377087 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.391504 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.408634 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.460744 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.491670 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:21.499015 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0918 01:32:31.816474 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-18 01:32:31.816439847 +0000 UTC m=+10.613575637 I0918 01:32:32.621005 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:32:32.621056 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-18 01:32:32.621046495 +0000 UTC m=+11.418182285 I0918 01:32:32.621557 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 01:32:32.621548212 +0000 UTC m=+11.418684012 E0918 01:32:32.635727 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:32:32.635785 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-18 01:32:32.635776444 +0000 UTC m=+11.432912204 E0918 01:32:32.635944 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:32:32.644380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:32.644524 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-18 01:32:32.644507765 +0000 UTC m=+11.441643555 E0918 01:32:32.649827 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0918 01:32:32.649945 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:32:32.650290 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:32:32.650372 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0918 01:32:32.666754 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:32.704327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-18 01:32:32.704306786 +0000 UTC m=+11.501442576 I0918 01:32:32.734468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-18 01:32:32.734449395 +0000 UTC m=+11.531585185 I0918 01:32:32.762097 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:32.762081358 +0000 UTC m=+11.559217128 I0918 01:32:32.783676 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:32.784080 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:32.784073745 +0000 UTC m=+11.581209505 I0918 01:32:32.799758 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:32.802726 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:32:37.650411 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:32:37.650386315 +0000 UTC m=+16.447522105 I0918 01:33:01.328180 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 01:33:01.328162228 +0000 UTC m=+40.125297998 I0918 01:33:01.328165 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:33:01.328279 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-18 01:33:01.328268409 +0000 UTC m=+40.125404199 I0918 01:33:01.339965 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-18 01:33:01.339954918 +0000 UTC m=+40.137090678 I0918 01:33:01.345429 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:33:01.352236 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-18 01:33:01.352220706 +0000 UTC m=+40.149356476 I0918 01:33:01.474016 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:33:01.510049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-18 01:33:01.510031124 +0000 UTC m=+40.307166884 I0918 01:33:01.532733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-18 01:33:01.532720952 +0000 UTC m=+40.329856712 I0918 01:33:01.557546 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:33:01.557534052 +0000 UTC m=+40.354669812 I0918 01:33:01.575539 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:33:01.620722 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:01.327436 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:38:01.327516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Issuing" to 2026-09-18 01:38:01.327477887 +0000 UTC m=+340.124613637 I0918 01:38:01.327518 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready" to 2026-09-18 01:38:01.327460637 +0000 UTC m=+340.124596397 I0918 01:38:01.337703 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:01.337770 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:38:01.337793 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Issuing" to 2026-09-18 01:38:01.337786344 +0000 UTC m=+340.134922104 I0918 01:38:01.560768 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:01.575352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-59.nip.io-tls-1" condition "Approved" to 2026-09-18 01:38:01.575339709 +0000 UTC m=+340.372475499 I0918 01:38:01.589985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-59.nip.io-tls-1" condition "Ready" to 2026-09-18 01:38:01.589975702 +0000 UTC m=+340.387111472 I0918 01:38:01.613139 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:38:01.613125622 +0000 UTC m=+340.410261412 I0918 01:38:01.627205 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:01.627966 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-59.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:38:01.627957419 +0000 UTC m=+340.425093219 I0918 01:38:01.638315 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:38:01.646700 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-59.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-59.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:07.902144 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-18 01:39:07.902129384 +0000 UTC m=+406.699265174 I0918 01:39:07.903384 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:39:07.903549 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 01:39:07.903528463 +0000 UTC m=+406.700664253 E0918 01:39:07.913187 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:39:07.913296 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-18 01:39:07.913283103 +0000 UTC m=+406.710418893 E0918 01:39:07.913332 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0918 01:39:07.918649 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:07.918753 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:39:07.918790 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-18 01:39:07.918782586 +0000 UTC m=+406.715918376 E0918 01:39:07.923470 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0918 01:39:07.923553 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:39:07.923580 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0918 01:39:07.923621 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0918 01:39:07.970179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-18 01:39:07.97016121 +0000 UTC m=+406.767297000 I0918 01:39:07.990537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-18 01:39:07.990523938 +0000 UTC m=+406.787659728 I0918 01:39:08.013255 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:08.013241364 +0000 UTC m=+406.810377124 I0918 01:39:08.030504 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:12.924642 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:12.924618897 +0000 UTC m=+411.721754647 I0918 01:39:53.684626 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:39:53.686891 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-18 01:39:53.686876992 +0000 UTC m=+452.484012752 I0918 01:39:53.686990 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 01:39:53.686978274 +0000 UTC m=+452.484114044 I0918 01:39:53.687235 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:39:53.687252 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-18 01:39:53.687249689 +0000 UTC m=+452.484385439 I0918 01:39:53.687345 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:39:53.687351 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 01:39:53.687336031 +0000 UTC m=+452.484471801 I0918 01:39:53.687367 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-18 01:39:53.687363181 +0000 UTC m=+452.484498941 I0918 01:39:53.684662 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 01:39:53.684654948 +0000 UTC m=+452.481790708 I0918 01:39:53.727017 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:53.727109 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:53.727169 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:39:53.727196 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-18 01:39:53.727189892 +0000 UTC m=+452.524325652 I0918 01:39:53.727465 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-18 01:39:53.727459307 +0000 UTC m=+452.524595077 I0918 01:39:53.727709 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:53.727746 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-18 01:39:53.727741933 +0000 UTC m=+452.524877693 I0918 01:39:53.853691 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:53.856029 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:53.872406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-18 01:39:53.872394985 +0000 UTC m=+452.669530745 I0918 01:39:53.877402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-18 01:39:53.877396093 +0000 UTC m=+452.674531853 I0918 01:39:53.885240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-18 01:39:53.885229959 +0000 UTC m=+452.682365719 I0918 01:39:53.894459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-18 01:39:53.894450612 +0000 UTC m=+452.691586372 I0918 01:39:53.904377 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:53.904364049 +0000 UTC m=+452.701499809 I0918 01:39:53.921215 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:53.921639 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:53.921629872 +0000 UTC m=+452.718765622 I0918 01:39:53.922395 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:53.922388787 +0000 UTC m=+452.719524547 I0918 01:39:53.960431 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:53.960899 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:53.960894071 +0000 UTC m=+452.758029831 I0918 01:39:54.063837 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:54.410545 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:54.460058 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:54.676937 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:54.733999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-18 01:39:54.733973597 +0000 UTC m=+453.531109387 I0918 01:39:54.842854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-18 01:39:54.842841467 +0000 UTC m=+453.639977247 I0918 01:39:55.274329 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:55.274312993 +0000 UTC m=+454.071448773 I0918 01:39:55.360362 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:39:55.361217 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:39:55.361204866 +0000 UTC m=+454.158340666 I0918 01:39:55.561661 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:40:06.733991 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:40:06.734050 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" condition "Issuing" to 2026-09-18 01:40:06.734036558 +0000 UTC m=+465.531172328 I0918 01:40:06.734062 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" condition "Ready" to 2026-09-18 01:40:06.734041388 +0000 UTC m=+465.531177178 I0918 01:40:06.749088 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:40:06.749206 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:40:06.749252 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" condition "Issuing" to 2026-09-18 01:40:06.749224187 +0000 UTC m=+465.546359957 I0918 01:40:07.017057 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:40:07.028229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls-1" condition "Approved" to 2026-09-18 01:40:07.028216523 +0000 UTC m=+465.825352283 I0918 01:40:07.054081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls-1" condition "Ready" to 2026-09-18 01:40:07.054067441 +0000 UTC m=+465.851203231 I0918 01:40:07.115136 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:40:07.115121424 +0000 UTC m=+465.912257224 I0918 01:40:07.129870 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:40:07.131615 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:40:07.131607227 +0000 UTC m=+465.928742998 I0918 01:40:07.145826 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s9sl7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:40:21.838897 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:40:21.838897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 01:40:21.838885706 +0000 UTC m=+480.636021466 I0918 01:40:21.838939 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-18 01:40:21.838935587 +0000 UTC m=+480.636071347 I0918 01:40:21.857848 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:40:21.857978 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-18 01:40:21.857926078 +0000 UTC m=+480.655061838 I0918 01:40:21.958349 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:40:21.999268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-18 01:40:21.99925845 +0000 UTC m=+480.796394210 I0918 01:40:22.072623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-18 01:40:22.072614633 +0000 UTC m=+480.869750393 I0918 01:40:22.121931 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:40:22.121908666 +0000 UTC m=+480.919044426 I0918 01:40:22.143951 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:43:42.607486 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-18 01:43:42.607466248 +0000 UTC m=+681.404602038 I0918 01:43:42.607922 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:43:42.607990 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 01:43:42.607953447 +0000 UTC m=+681.405089227 I0918 01:43:42.622959 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:43:42.623167 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:43:42.623236 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-18 01:43:42.623196546 +0000 UTC m=+681.420332346 I0918 01:43:42.989746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:43:43.004374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-18 01:43:43.004364299 +0000 UTC m=+681.801500059 I0918 01:43:43.019803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-18 01:43:43.019790334 +0000 UTC m=+681.816926114 I0918 01:43:43.040008 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:43:43.039997654 +0000 UTC m=+681.837133414 I0918 01:43:43.055779 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:44:27.003647 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0918 01:44:27.003712 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-18 01:44:27.003703501 +0000 UTC m=+725.800839301 I0918 01:44:27.003691 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 01:44:27.00366685 +0000 UTC m=+725.800802700 I0918 01:44:27.020874 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:44:27.028080 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-18 01:44:27.028066306 +0000 UTC m=+725.825202076 I0918 01:44:27.329694 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:44:27.363378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-18 01:44:27.363369942 +0000 UTC m=+726.160505702 I0918 01:44:27.382961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-18 01:44:27.382949642 +0000 UTC m=+726.180085432 I0918 01:44:27.410765 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:44:27.410754444 +0000 UTC m=+726.207890214 I0918 01:44:27.422899 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:44:27.423682 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-18 01:44:27.423674646 +0000 UTC m=+726.220810416 I0918 01:44:27.438231 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0918 01:44:27.446345 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"