I0427 12:01:16.445387       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0427 12:01:16.445515       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0427 12:01:16.445620       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0427 12:01:16.449624       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0427 12:01:16.449957       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0427 12:01:16.450769       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0427 12:01:16.450875       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0427 12:01:16.454403       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0427 12:01:16.466366       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0427 12:01:16.466542       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0427 12:01:16.469502       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0427 12:01:16.472706       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0427 12:01:16.475068       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0427 12:01:16.477459       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0427 12:01:16.477486       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0427 12:01:16.481875       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0427 12:01:16.483845       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0427 12:01:16.485775       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0427 12:01:16.487382       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0427 12:01:16.489415       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0427 12:01:16.491685       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0427 12:01:16.491713       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0427 12:01:16.491792       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0427 12:01:16.494644       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0427 12:01:16.499351       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0427 12:01:16.503051       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0427 12:01:16.506369       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0427 12:01:16.506450       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0427 12:01:16.509326       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0427 12:01:16.511797       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0427 12:01:16.513653       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0427 12:01:16.513726       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0427 12:01:16.515915       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0427 12:01:16.518716       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.518821       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.519971       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.537464       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.556173       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.571385       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.590233       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.604472       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.618891       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:16.620308       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0427 12:01:28.035723       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 12:01:28.035709031 +0000 UTC m=+11.619672743
I0427 12:01:28.786110       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:01:28.786155       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 12:01:28.78614485 +0000 UTC m=+12.370108592
I0427 12:01:28.786511       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 12:01:28.786497944 +0000 UTC m=+12.370461696
I0427 12:01:28.805467       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0427 12:01:28.805483       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0427 12:01:28.805526       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 12:01:28.805519444 +0000 UTC m=+12.389483176
I0427 12:01:28.805530       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 12:01:28.805524154 +0000 UTC m=+12.389487876
E0427 12:01:28.805954       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0427 12:01:28.822989       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0427 12:01:28.823096       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0427 12:01:28.823095       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0427 12:01:28.823125       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0427 12:01:28.823165       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 12:01:28.8231597 +0000 UTC m=+12.407123412
E0427 12:01:28.823288       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0427 12:01:28.828817       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:01:28.834199       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kj8wh" condition "Approved" to 2026-04-27 12:01:28.834189798 +0000 UTC m=+12.418153530
I0427 12:01:28.851399       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kj8wh" condition "Ready" to 2026-04-27 12:01:28.851387967 +0000 UTC m=+12.435351679
I0427 12:01:28.873471       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:01:28.873458695 +0000 UTC m=+12.457422437
I0427 12:01:28.888865       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:01:28.889922       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:01:28.889914785 +0000 UTC m=+12.473878507
I0427 12:01:28.910488       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:01:33.823582       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:01:33.82353332 +0000 UTC m=+17.407497062
I0427 12:01:56.294101       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 12:01:56.294034823 +0000 UTC m=+39.877998575
I0427 12:01:56.294680       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:01:56.294711       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 12:01:56.294705573 +0000 UTC m=+39.878669295
I0427 12:01:56.313045       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 12:01:56.313029464 +0000 UTC m=+39.896993176
I0427 12:01:56.331702       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:01:56.332682       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 12:01:56.33182051 +0000 UTC m=+39.915784212
I0427 12:01:56.532960       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:01:56.567276       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dss74" condition "Approved" to 2026-04-27 12:01:56.567266849 +0000 UTC m=+40.151230571
I0427 12:01:56.594684       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dss74" condition "Ready" to 2026-04-27 12:01:56.594678063 +0000 UTC m=+40.178641785
I0427 12:01:56.635929       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:01:56.635914978 +0000 UTC m=+40.219878730
I0427 12:01:56.656685       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:01:56.657034       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:01:56.657029146 +0000 UTC m=+40.240992858
I0427 12:01:56.678546       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:01:56.680573       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:06:26.883075       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-186.nip.io-tls" condition "Ready" to 2026-04-27 12:06:26.883032877 +0000 UTC m=+310.466996619
I0427 12:06:26.883092       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-186.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:06:26.883307       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-186.nip.io-tls" condition "Issuing" to 2026-04-27 12:06:26.883288593 +0000 UTC m=+310.467252335
I0427 12:06:26.900707       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:06:26.900763       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-186.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:06:26.900779       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-186.nip.io-tls" condition "Issuing" to 2026-04-27 12:06:26.900773747 +0000 UTC m=+310.484737469
I0427 12:06:27.204930       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-186.nip.io-tls-knh7g" condition "Approved" to 2026-04-27 12:06:27.204917277 +0000 UTC m=+310.788881029
I0427 12:06:27.235923       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-186.nip.io-tls-knh7g" condition "Ready" to 2026-04-27 12:06:27.23591237 +0000 UTC m=+310.819876092
I0427 12:06:27.262677       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-186.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:06:27.262664154 +0000 UTC m=+310.846627877
I0427 12:06:27.283161       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:06:27.331064       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:07:31.281226       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 12:07:31.281205178 +0000 UTC m=+374.865168890
I0427 12:07:31.281456       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:07:31.281638       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 12:07:31.281614727 +0000 UTC m=+374.865578449
E0427 12:07:31.296341       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0427 12:07:31.296382       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 12:07:31.296371849 +0000 UTC m=+374.880335581
E0427 12:07:31.296614       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0427 12:07:31.296623       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:07:31.296804       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 12:07:31.296796519 +0000 UTC m=+374.880760241
E0427 12:07:31.312446       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0427 12:07:31.313049       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0427 12:07:31.313075       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0427 12:07:31.313120       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0427 12:07:31.322121       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:07:31.322256       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 12:07:31.322226608 +0000 UTC m=+374.906190310
I0427 12:07:31.324080       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fhhm5" condition "Approved" to 2026-04-27 12:07:31.324065831 +0000 UTC m=+374.908029543
I0427 12:07:31.336035       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fhhm5" condition "Ready" to 2026-04-27 12:07:31.336022668 +0000 UTC m=+374.919986370
I0427 12:07:31.356882       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:07:31.356866901 +0000 UTC m=+374.940830623
I0427 12:07:31.374999       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:07:31.375415       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:07:31.375406441 +0000 UTC m=+374.959370163
I0427 12:07:31.393648       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:07:31.394053       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:07:31.394042222 +0000 UTC m=+374.978005944
I0427 12:07:36.312945       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:07:36.31292814 +0000 UTC m=+379.896891892
I0427 12:08:16.986888       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:08:16.986982       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 12:08:16.986974585 +0000 UTC m=+420.570938307
I0427 12:08:16.993922       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 12:08:16.993907667 +0000 UTC m=+420.577871389
I0427 12:08:16.995904       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:08:16.995941       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 12:08:16.99593554 +0000 UTC m=+420.579899252
I0427 12:08:16.986725       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 12:08:16.986674169 +0000 UTC m=+420.570637881
I0427 12:08:17.009780       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 12:08:17.009765914 +0000 UTC m=+420.593729626
I0427 12:08:17.012013       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:08:17.018924       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 12:08:17.018902214 +0000 UTC m=+420.602865946
I0427 12:08:17.055979       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:17.056155       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 12:08:17.05614552 +0000 UTC m=+420.640109222
I0427 12:08:17.061890       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:17.061954       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:08:17.061976       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 12:08:17.061972057 +0000 UTC m=+420.645935759
I0427 12:08:17.062570       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:17.062605       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:08:17.062618       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 12:08:17.062614741 +0000 UTC m=+420.646578453
I0427 12:08:17.240391       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:17.320488       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vrxfm" condition "Approved" to 2026-04-27 12:08:17.320475576 +0000 UTC m=+420.904439278
I0427 12:08:17.348155       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vrxfm" condition "Ready" to 2026-04-27 12:08:17.348141912 +0000 UTC m=+420.932105624
I0427 12:08:17.375276       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:17.378693       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:17.378683671 +0000 UTC m=+420.962647373
I0427 12:08:17.385274       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-brz2r" condition "Approved" to 2026-04-27 12:08:17.385260835 +0000 UTC m=+420.969224537
I0427 12:08:17.411513       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:17.426190       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-brz2r" condition "Ready" to 2026-04-27 12:08:17.426180381 +0000 UTC m=+421.010144093
I0427 12:08:17.468062       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:17.468040576 +0000 UTC m=+421.052004288
I0427 12:08:17.576471       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:17.630253       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:17.699638       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dxjjm" condition "Approved" to 2026-04-27 12:08:17.699618657 +0000 UTC m=+421.283582369
I0427 12:08:17.839263       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dxjjm" condition "Ready" to 2026-04-27 12:08:17.839251573 +0000 UTC m=+421.423215275
I0427 12:08:18.431559       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:18.43154668 +0000 UTC m=+422.015510392
I0427 12:08:18.581583       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:18.581918       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:18.581909808 +0000 UTC m=+422.165873530
I0427 12:08:18.628883       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:18.877368       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:18.928396       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:25.348678       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2thck-tls" condition "Ready" to 2026-04-27 12:08:25.34799878 +0000 UTC m=+428.931962492
I0427 12:08:25.348821       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2thck-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:08:25.348871       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2thck-tls" condition "Issuing" to 2026-04-27 12:08:25.348858558 +0000 UTC m=+428.932822310
I0427 12:08:25.367298       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2thck-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2thck-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:25.367400       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2thck-tls" condition "Ready" to 2026-04-27 12:08:25.36738962 +0000 UTC m=+428.951353342
I0427 12:08:25.815230       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2thck-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2thck-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:25.852195       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2thck-hzpnq" condition "Approved" to 2026-04-27 12:08:25.852179377 +0000 UTC m=+429.436143109
I0427 12:08:25.880480       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2thck-hzpnq" condition "Ready" to 2026-04-27 12:08:25.880465501 +0000 UTC m=+429.464429223
I0427 12:08:25.930402       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2thck-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:25.930383405 +0000 UTC m=+429.514347117
I0427 12:08:25.956040       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2thck-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2thck-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:37.628626       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 12:08:37.628591694 +0000 UTC m=+441.212555416
I0427 12:08:37.628693       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:08:37.628732       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 12:08:37.628722706 +0000 UTC m=+441.212686428
I0427 12:08:37.645318       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:37.645390       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 12:08:37.645381524 +0000 UTC m=+441.229345236
I0427 12:08:37.758172       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:37.798004       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fvzzj" condition "Approved" to 2026-04-27 12:08:37.79798844 +0000 UTC m=+441.381952162
I0427 12:08:37.817438       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fvzzj" condition "Ready" to 2026-04-27 12:08:37.817420856 +0000 UTC m=+441.401384608
I0427 12:08:37.853595       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:37.853583193 +0000 UTC m=+441.437546905
I0427 12:08:37.874092       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:08:37.874370       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:08:37.874362839 +0000 UTC m=+441.458326561
I0427 12:08:37.899313       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:11:47.880569       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:11:47.880740       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 12:11:47.88072951 +0000 UTC m=+631.464693222
I0427 12:11:47.880633       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 12:11:47.880617318 +0000 UTC m=+631.464581030
I0427 12:11:47.898100       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:11:47.898212       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:11:47.898253       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 12:11:47.898242102 +0000 UTC m=+631.482205854
I0427 12:11:48.028445       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:11:48.033757       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qhp5t" condition "Approved" to 2026-04-27 12:11:48.033745726 +0000 UTC m=+631.617709448
I0427 12:11:48.050382       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qhp5t" condition "Ready" to 2026-04-27 12:11:48.050371051 +0000 UTC m=+631.634334773
I0427 12:11:48.081154       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:11:48.081138021 +0000 UTC m=+631.665101743
I0427 12:11:48.099557       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:11:48.099893       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:11:48.099887376 +0000 UTC m=+631.683851098
I0427 12:11:48.119394       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:12:29.266019       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:12:29.266187       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 12:12:29.266179957 +0000 UTC m=+672.850143669
I0427 12:12:29.266819       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 12:12:29.266813719 +0000 UTC m=+672.850777431
I0427 12:12:29.285418       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:12:29.285577       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0427 12:12:29.285609       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 12:12:29.285603372 +0000 UTC m=+672.869567084
I0427 12:12:29.474220       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:12:29.482055       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kmvtz" condition "Approved" to 2026-04-27 12:12:29.482046915 +0000 UTC m=+673.066010627
I0427 12:12:29.514230       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kmvtz" condition "Ready" to 2026-04-27 12:12:29.514214488 +0000 UTC m=+673.098178240
I0427 12:12:29.546511       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 12:12:29.546494493 +0000 UTC m=+673.130458215
I0427 12:12:29.572995       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0427 12:12:29.679794       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"