I0903 16:17:55.184881 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0903 16:17:55.185022 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0903 16:17:55.187889 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0903 16:17:55.187920 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0903 16:17:55.187928 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0903 16:17:55.189124 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0903 16:17:55.189780 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0903 16:17:55.189791 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0903 16:17:55.193639 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0903 16:17:55.209424 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0903 16:17:55.214692 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0903 16:17:55.221280 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0903 16:17:55.223326 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0903 16:17:55.227672 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0903 16:17:55.230781 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0903 16:17:55.233336 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0903 16:17:55.236060 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0903 16:17:55.238947 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0903 16:17:55.240950 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0903 16:17:55.245598 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0903 16:17:55.247480 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0903 16:17:55.247510 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0903 16:17:55.249469 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0903 16:17:55.251110 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0903 16:17:55.251122 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0903 16:17:55.251128 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0903 16:17:55.251133 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0903 16:17:55.251211 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0903 16:17:55.253047 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0903 16:17:55.254951 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0903 16:17:55.256625 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0903 16:17:55.256745 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0903 16:17:55.259592 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0903 16:17:55.265449 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0903 16:17:55.269744 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.269784 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.269885 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.270077 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.270738 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.271523 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.289752 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.303826 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.321847 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.341843 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:17:55.358034 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:18:05.306631 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-03 16:18:05.306610457 +0000 UTC m=+10.148338132 I0903 16:18:06.026031 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-03 16:18:06.0260073 +0000 UTC m=+10.867734975 I0903 16:18:06.026922 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:18:06.026942 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-03 16:18:06.026933859 +0000 UTC m=+10.868661534 E0903 16:18:06.037830 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 16:18:06.037914 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-03 16:18:06.037900159 +0000 UTC m=+10.879627864 I0903 16:18:06.038478 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:18:06.038603 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:18:06.038663 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-03 16:18:06.038652802 +0000 UTC m=+10.880380527 E0903 16:18:06.039086 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:18:06.056308 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0903 16:18:06.057219 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:18:06.057787 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:18:06.057875 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0903 16:18:06.097137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-03 16:18:06.097126895 +0000 UTC m=+10.938854580 I0903 16:18:06.123751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-03 16:18:06.12373938 +0000 UTC m=+10.965467075 I0903 16:18:06.150627 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:18:06.150610833 +0000 UTC m=+10.992338548 I0903 16:18:06.165387 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:18:11.057683 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:18:11.057670484 +0000 UTC m=+15.899398199 I0903 16:18:35.274380 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:18:35.274414 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-03 16:18:35.274405818 +0000 UTC m=+40.116133503 I0903 16:18:35.274820 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-03 16:18:35.274814948 +0000 UTC m=+40.116542633 I0903 16:18:35.293172 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-03 16:18:35.29316259 +0000 UTC m=+40.134890265 I0903 16:18:35.296867 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:18:35.301297 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:18:35.301393 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-03 16:18:35.301368667 +0000 UTC m=+40.143096382 I0903 16:18:35.465518 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:18:35.477469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-03 16:18:35.477421098 +0000 UTC m=+40.319148803 I0903 16:18:35.504322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-03 16:18:35.504313264 +0000 UTC m=+40.346040929 I0903 16:18:35.537709 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:18:35.537700133 +0000 UTC m=+40.379427818 I0903 16:18:35.553042 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:18:35.602474 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:23:42.313527 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready" to 2026-09-03 16:23:42.313457237 +0000 UTC m=+347.155184952 I0903 16:23:42.313698 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-55.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:23:42.313760 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Issuing" to 2026-09-03 16:23:42.313752007 +0000 UTC m=+347.155479692 I0903 16:23:42.325958 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-55.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-55.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:23:42.326251 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready" to 2026-09-03 16:23:42.326207146 +0000 UTC m=+347.167934861 I0903 16:23:42.475963 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-55.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-55.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:23:42.509487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-55.nip.io-tls-1" condition "Approved" to 2026-09-03 16:23:42.509464551 +0000 UTC m=+347.351192236 I0903 16:23:42.527693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-55.nip.io-tls-1" condition "Ready" to 2026-09-03 16:23:42.527675976 +0000 UTC m=+347.369403691 I0903 16:23:42.552346 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:23:42.55233634 +0000 UTC m=+347.394064035 I0903 16:23:42.569503 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-55.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-55.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:23:42.573316 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:23:42.5733034 +0000 UTC m=+347.415031115 I0903 16:23:42.585736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-55.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-55.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:23:42.586245 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-55.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:23:42.586236654 +0000 UTC m=+347.427964339 I0903 16:24:50.364154 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:24:50.364254 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-03 16:24:50.364242322 +0000 UTC m=+415.205970037 I0903 16:24:50.364226 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-03 16:24:50.364076408 +0000 UTC m=+415.205804103 E0903 16:24:50.374353 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 16:24:50.374446 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-03 16:24:50.374435125 +0000 UTC m=+415.216162830 E0903 16:24:50.374475 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 16:24:50.382072 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:50.382188 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-03 16:24:50.382173252 +0000 UTC m=+415.223900967 E0903 16:24:50.391143 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0903 16:24:50.391896 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:24:50.391962 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:24:50.392001 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0903 16:24:50.399265 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:50.418363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-03 16:24:50.418347622 +0000 UTC m=+415.260075287 I0903 16:24:50.430302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-03 16:24:50.430291721 +0000 UTC m=+415.272019396 I0903 16:24:50.456038 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:24:50.456023951 +0000 UTC m=+415.297751626 I0903 16:24:50.471397 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:50.472062 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:24:50.47205144 +0000 UTC m=+415.313779115 I0903 16:24:50.489225 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:55.392488 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:24:55.392474984 +0000 UTC m=+420.234202699 I0903 16:25:35.947102 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-03 16:25:35.947086472 +0000 UTC m=+460.788814177 I0903 16:25:35.947096 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:25:35.947623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-03 16:25:35.947590345 +0000 UTC m=+460.789318050 I0903 16:25:35.952632 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-03 16:25:35.952618192 +0000 UTC m=+460.794345867 I0903 16:25:35.957782 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:25:35.957839 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-03 16:25:35.957824932 +0000 UTC m=+460.799552637 I0903 16:25:35.968974 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:25:35.969012 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-03 16:25:35.969004024 +0000 UTC m=+460.810731699 I0903 16:25:35.969332 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-03 16:25:35.969327803 +0000 UTC m=+460.811055478 I0903 16:25:35.974986 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:35.975595 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:25:35.983418 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-03 16:25:35.983388908 +0000 UTC m=+460.825116643 I0903 16:25:35.986508 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:35.986587 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:25:35.986611 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-03 16:25:35.986605499 +0000 UTC m=+460.828333174 I0903 16:25:35.993929 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:35.998761 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-03 16:25:35.998748295 +0000 UTC m=+460.840475970 I0903 16:25:36.251275 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:36.284393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-03 16:25:36.284378659 +0000 UTC m=+461.126106344 I0903 16:25:36.286199 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:36.319584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-03 16:25:36.319574346 +0000 UTC m=+461.161302021 I0903 16:25:36.341973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-03 16:25:36.34196375 +0000 UTC m=+461.183691425 I0903 16:25:36.390992 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:25:36.390983865 +0000 UTC m=+461.232711540 I0903 16:25:36.430844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:36.431400 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:25:36.431391633 +0000 UTC m=+461.273119298 I0903 16:25:36.431418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-03 16:25:36.431406353 +0000 UTC m=+461.273134028 I0903 16:25:36.431788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-03 16:25:36.431783873 +0000 UTC m=+461.273511548 I0903 16:25:36.512397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-03 16:25:36.512387113 +0000 UTC m=+461.354114778 I0903 16:25:36.732820 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:36.886312 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:25:36.886301924 +0000 UTC m=+461.728029609 I0903 16:25:37.040291 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:25:37.040277581 +0000 UTC m=+461.882005286 I0903 16:25:37.132633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:37.133219 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:25:37.133209359 +0000 UTC m=+461.974937054 I0903 16:25:37.240189 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:37.241128 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:25:37.241116263 +0000 UTC m=+462.082843978 I0903 16:25:37.585257 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:37.633295 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:37.733948 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:46.656421 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:25:46.656516 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls" condition "Ready" to 2026-09-03 16:25:46.656502898 +0000 UTC m=+471.498230603 I0903 16:25:46.656532 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls" condition "Issuing" to 2026-09-03 16:25:46.656526629 +0000 UTC m=+471.498254314 I0903 16:25:46.669259 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:46.669388 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls" condition "Ready" to 2026-09-03 16:25:46.669379629 +0000 UTC m=+471.511107314 I0903 16:25:46.849149 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:25:46.876234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls-1" condition "Approved" to 2026-09-03 16:25:46.875804971 +0000 UTC m=+471.717532646 I0903 16:25:46.899242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls-1" condition "Ready" to 2026-09-03 16:25:46.899232025 +0000 UTC m=+471.740959700 I0903 16:25:46.962504 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:25:46.96249281 +0000 UTC m=+471.804220485 I0903 16:25:46.986937 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8fb8b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:00.012103 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-03 16:26:00.01207966 +0000 UTC m=+484.853807335 I0903 16:26:00.012298 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:26:00.012374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-03 16:26:00.012371708 +0000 UTC m=+484.854099383 I0903 16:26:00.028241 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:00.028407 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:26:00.028477 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-03 16:26:00.028467153 +0000 UTC m=+484.870194828 I0903 16:26:00.171290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-03 16:26:00.17127756 +0000 UTC m=+485.013005235 I0903 16:26:00.190988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-03 16:26:00.190976893 +0000 UTC m=+485.032704568 I0903 16:26:00.220406 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:26:00.220393976 +0000 UTC m=+485.062121651 I0903 16:26:00.263989 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:00.264477 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:26:00.264470839 +0000 UTC m=+485.106198524 I0903 16:26:00.290133 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:00.295462 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:29:23.187864 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-03 16:29:23.187847469 +0000 UTC m=+688.029575144 I0903 16:29:23.188250 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:29:23.188291 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-03 16:29:23.188281589 +0000 UTC m=+688.030009294 I0903 16:29:23.201839 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:29:23.201920 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:29:23.201943 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-03 16:29:23.201935421 +0000 UTC m=+688.043663126 I0903 16:29:23.473780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-03 16:29:23.473762804 +0000 UTC m=+688.315490509 I0903 16:29:23.494923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-03 16:29:23.494909941 +0000 UTC m=+688.336637646 I0903 16:29:23.526527 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:29:23.52651222 +0000 UTC m=+688.368239895 I0903 16:29:23.548740 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:29:23.597202 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:30:08.363612 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-03 16:30:08.36359643 +0000 UTC m=+733.205324135 I0903 16:30:08.364049 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:30:08.364098 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-03 16:30:08.364091429 +0000 UTC m=+733.205819134 I0903 16:30:08.380293 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:30:08.380350 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-03 16:30:08.380344408 +0000 UTC m=+733.222072083 I0903 16:30:08.547656 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:30:08.579484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-09-03 16:30:08.579473226 +0000 UTC m=+733.421200911 I0903 16:30:08.598392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-09-03 16:30:08.598361821 +0000 UTC m=+733.440089496 I0903 16:30:08.625273 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:30:08.625264561 +0000 UTC m=+733.466992226 I0903 16:30:08.641253 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"