I0409 01:58:08.244295       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0409 01:58:08.244470       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0409 01:58:08.244585       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0409 01:58:08.248419       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0409 01:58:08.248918       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0409 01:58:08.249057       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0409 01:58:08.249080       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0409 01:58:08.252235       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0409 01:58:08.270364       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0409 01:58:08.271435       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0409 01:58:08.271673       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0409 01:58:08.277874       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0409 01:58:08.281402       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0409 01:58:08.283976       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0409 01:58:08.286477       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0409 01:58:08.288593       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0409 01:58:08.288699       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0409 01:58:08.292233       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0409 01:58:08.297498       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0409 01:58:08.300105       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0409 01:58:08.300149       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0409 01:58:08.300186       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0409 01:58:08.302766       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0409 01:58:08.305277       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0409 01:58:08.307583       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0409 01:58:08.310215       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0409 01:58:08.312375       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0409 01:58:08.312410       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0409 01:58:08.316468       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0409 01:58:08.319529       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0409 01:58:08.322125       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0409 01:58:08.324714       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0409 01:58:08.327326       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0409 01:58:08.329890       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.331182       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.331401       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.353510       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.373511       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.391421       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.410093       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.410504       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.425073       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:08.444145       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0409 01:58:20.838857       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 01:58:20.838839535 +0000 UTC m=+12.632670357
I0409 01:58:21.606795       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 01:58:21.606705401 +0000 UTC m=+13.400536253
I0409 01:58:21.607045       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 01:58:21.607075       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 01:58:21.607069202 +0000 UTC m=+13.400900054
I0409 01:58:21.624039       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 01:58:21.624219       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 01:58:21.624210695 +0000 UTC m=+13.418041507
E0409 01:58:21.629027       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0409 01:58:21.629292       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 01:58:21.629284746 +0000 UTC m=+13.423115558
E0409 01:58:21.629347       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 01:58:21.639679       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0409 01:58:21.639908       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 01:58:21.640041       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 01:58:21.640185       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0409 01:58:21.648013       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 01:58:21.670162       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pcv46" condition "Approved" to 2026-04-09 01:58:21.670145991 +0000 UTC m=+13.463976813
I0409 01:58:21.687343       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pcv46" condition "Ready" to 2026-04-09 01:58:21.687329115 +0000 UTC m=+13.481159937
I0409 01:58:21.713934       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 01:58:21.713923177 +0000 UTC m=+13.507753999
I0409 01:58:21.731398       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 01:58:21.775218       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 01:58:26.640819       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 01:58:26.64030168 +0000 UTC m=+18.434132492
I0409 01:58:47.554284       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 01:58:47.554262124 +0000 UTC m=+39.348092936
I0409 01:58:47.556318       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 01:58:47.556461       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 01:58:47.556445649 +0000 UTC m=+39.350276471
I0409 01:58:47.579435       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 01:58:47.579415625 +0000 UTC m=+39.373246447
I0409 01:58:47.591877       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0409 01:58:47.592157       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 01:58:47.592210       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 01:58:47.592200357 +0000 UTC m=+39.386031179
I0409 01:58:47.767913       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6scrb" condition "Approved" to 2026-04-09 01:58:47.767902347 +0000 UTC m=+39.561733169
I0409 01:58:47.804088       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6scrb" condition "Ready" to 2026-04-09 01:58:47.804067635 +0000 UTC m=+39.597898457
I0409 01:58:47.836512       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 01:58:47.836476338 +0000 UTC m=+39.630307160
I0409 01:58:47.859021       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:03:19.007006       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-09 02:03:19.006966199 +0000 UTC m=+310.800797011
I0409 02:03:19.007157       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:03:19.007233       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Issuing" to 2026-04-09 02:03:19.007226509 +0000 UTC m=+310.801057331
I0409 02:03:19.038259       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:03:19.038354       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-09 02:03:19.038342064 +0000 UTC m=+310.832172906
I0409 02:03:19.186788       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:03:19.225663       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-74bnx" condition "Approved" to 2026-04-09 02:03:19.225647277 +0000 UTC m=+311.019478089
I0409 02:03:19.255586       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-74bnx" condition "Ready" to 2026-04-09 02:03:19.2555681 +0000 UTC m=+311.049398912
I0409 02:03:19.299669       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:03:19.299650352 +0000 UTC m=+311.093481194
I0409 02:03:19.345425       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:03:19.437543       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:04:19.975861       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:04:19.976169       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:04:19.975663297 +0000 UTC m=+371.769494119
I0409 02:04:19.976207       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 02:04:19.975908734 +0000 UTC m=+371.769739576
E0409 02:04:19.997162       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0409 02:04:19.997243       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 02:04:19.997233379 +0000 UTC m=+371.791064191
E0409 02:04:19.997312       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0409 02:04:19.998899       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:04:19.998974       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:04:19.998964547 +0000 UTC m=+371.792795369
E0409 02:04:20.029613       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0409 02:04:20.029898       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 02:04:20.029970       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 02:04:20.030022       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0409 02:04:20.042118       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:04:20.081889       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ck7jh" condition "Approved" to 2026-04-09 02:04:20.081861593 +0000 UTC m=+371.875692455
I0409 02:04:20.097126       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ck7jh" condition "Ready" to 2026-04-09 02:04:20.097109656 +0000 UTC m=+371.890940478
I0409 02:04:20.131297       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:04:20.131276757 +0000 UTC m=+371.925107569
I0409 02:04:20.156768       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:04:20.157027       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:04:20.157018462 +0000 UTC m=+371.950849274
I0409 02:04:20.173286       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:04:20.173593       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:04:20.173584293 +0000 UTC m=+371.967415105
I0409 02:04:20.174104       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:04:25.030745       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:04:25.030730461 +0000 UTC m=+376.824561303
I0409 02:05:08.000427       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 02:05:08.00039167 +0000 UTC m=+419.794222492
I0409 02:05:08.001422       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:05:08.001561       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 02:05:08.001526308 +0000 UTC m=+419.795357130
I0409 02:05:08.025245       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:05:08.025227187 +0000 UTC m=+419.819057999
I0409 02:05:08.025983       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:05:08.028549       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 02:05:08.028538446 +0000 UTC m=+419.822369278
I0409 02:05:08.063723       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 02:05:08.063702762 +0000 UTC m=+419.857533594
I0409 02:05:08.064473       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:05:08.064564       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:05:08.064557212 +0000 UTC m=+419.858388024
I0409 02:05:08.158478       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:08.158595       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 02:05:08.158583961 +0000 UTC m=+419.952414803
I0409 02:05:08.172472       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:08.172825       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:05:08.172854       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 02:05:08.172845574 +0000 UTC m=+419.966676396
I0409 02:05:08.178028       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:08.179120       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 02:05:08.179093524 +0000 UTC m=+419.972924386
I0409 02:05:08.322014       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dpdfq" condition "Approved" to 2026-04-09 02:05:08.321995887 +0000 UTC m=+420.115826699
I0409 02:05:08.346179       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:08.348368       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dpdfq" condition "Ready" to 2026-04-09 02:05:08.348355461 +0000 UTC m=+420.142186283
I0409 02:05:08.392987       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:08.392964383 +0000 UTC m=+420.186795225
I0409 02:05:08.421489       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-754jx" condition "Approved" to 2026-04-09 02:05:08.421457167 +0000 UTC m=+420.215287969
I0409 02:05:08.444747       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:08.455460       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-754jx" condition "Ready" to 2026-04-09 02:05:08.455448314 +0000 UTC m=+420.249279126
I0409 02:05:08.467524       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:08.498007       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:08.497987696 +0000 UTC m=+420.291818508
I0409 02:05:08.535876       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:08.536256       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:08.536249306 +0000 UTC m=+420.330080118
I0409 02:05:08.773866       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:08.878492       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:09.234203       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hlfns" condition "Approved" to 2026-04-09 02:05:09.23418901 +0000 UTC m=+421.028019832
I0409 02:05:09.426404       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hlfns" condition "Ready" to 2026-04-09 02:05:09.426384414 +0000 UTC m=+421.220215246
I0409 02:05:09.776723       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-hlfns" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-mx4nn" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
I0409 02:05:09.984923       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bfh48" condition "Approved" to 2026-04-09 02:05:09.984909438 +0000 UTC m=+421.778740260
I0409 02:05:10.039158       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bfh48" condition "Ready" to 2026-04-09 02:05:10.039139745 +0000 UTC m=+421.832970557
E0409 02:05:10.476213       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-mx4nn\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls"
I0409 02:05:10.608039       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:10.60802098 +0000 UTC m=+422.401851832
I0409 02:05:10.678456       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:10.678872       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:10.678865153 +0000 UTC m=+422.472695975
I0409 02:05:10.879851       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:20.636163       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:05:20.636223       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" condition "Issuing" to 2026-04-09 02:05:20.636204958 +0000 UTC m=+432.430035810
I0409 02:05:20.636434       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" condition "Ready" to 2026-04-09 02:05:20.636405853 +0000 UTC m=+432.430236695
I0409 02:05:20.660264       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:20.660352       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:05:20.660376       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" condition "Issuing" to 2026-04-09 02:05:20.660370942 +0000 UTC m=+432.454201754
I0409 02:05:20.840106       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vwzw2-thd8s" condition "Approved" to 2026-04-09 02:05:20.840086476 +0000 UTC m=+432.633917288
I0409 02:05:20.862316       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vwzw2-thd8s" condition "Ready" to 2026-04-09 02:05:20.862286413 +0000 UTC m=+432.656117235
I0409 02:05:20.906258       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:20.906234795 +0000 UTC m=+432.700065617
I0409 02:05:20.929196       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:20.930172       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:20.930161703 +0000 UTC m=+432.723992525
I0409 02:05:20.946396       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:21.024713       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:21.025119       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwzw2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:21.025110012 +0000 UTC m=+432.818940834
I0409 02:05:32.534472       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:05:32.534512       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 02:05:32.534501954 +0000 UTC m=+444.328332776
I0409 02:05:32.534985       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 02:05:32.534979795 +0000 UTC m=+444.328810617
I0409 02:05:32.573586       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:32.573770       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 02:05:32.573759032 +0000 UTC m=+444.367589844
I0409 02:05:32.666692       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:05:32.710584       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qmppv" condition "Approved" to 2026-04-09 02:05:32.710568695 +0000 UTC m=+444.504399507
I0409 02:05:32.749274       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qmppv" condition "Ready" to 2026-04-09 02:05:32.74926464 +0000 UTC m=+444.543095452
I0409 02:05:32.778943       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:05:32.778925711 +0000 UTC m=+444.572756543
I0409 02:05:32.801423       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:08:47.014890       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 02:08:47.014784347 +0000 UTC m=+638.808615239
I0409 02:08:47.015414       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:08:47.015464       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 02:08:47.015451068 +0000 UTC m=+638.809281890
I0409 02:08:47.038721       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:08:47.039021       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 02:08:47.038861951 +0000 UTC m=+638.832692793
I0409 02:08:47.296190       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:08:47.328264       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jxtk5" condition "Approved" to 2026-04-09 02:08:47.328246791 +0000 UTC m=+639.122077643
I0409 02:08:47.362709       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jxtk5" condition "Ready" to 2026-04-09 02:08:47.362697144 +0000 UTC m=+639.156527956
I0409 02:08:47.397088       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:08:47.397070317 +0000 UTC m=+639.190901129
I0409 02:08:47.416229       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:08:47.416683       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:08:47.416667435 +0000 UTC m=+639.210498287
I0409 02:08:47.429828       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:08:47.442538       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:09:27.175637       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 02:09:27.175602572 +0000 UTC m=+678.969433394
I0409 02:09:27.176175       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:09:27.176239       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 02:09:27.176205062 +0000 UTC m=+678.970035864
I0409 02:09:27.190833       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:09:27.190964       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 02:09:27.190997       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 02:09:27.190989611 +0000 UTC m=+678.984820463
I0409 02:09:27.484645       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h2fj6" condition "Approved" to 2026-04-09 02:09:27.484627306 +0000 UTC m=+679.278458138
I0409 02:09:27.509921       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-h2fj6" condition "Ready" to 2026-04-09 02:09:27.509911732 +0000 UTC m=+679.303742534
I0409 02:09:27.539552       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:27.539527851 +0000 UTC m=+679.333358663
I0409 02:09:27.564424       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 02:09:27.564646       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:27.564636074 +0000 UTC m=+679.358466886
I0409 02:09:27.581926       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"