I0428 06:47:54.747669       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0428 06:47:54.747808       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0428 06:47:54.747900       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0428 06:47:54.752161       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0428 06:47:54.753840       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0428 06:47:54.754058       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0428 06:47:54.754124       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0428 06:47:54.760948       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0428 06:47:54.775708       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0428 06:47:54.779963       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0428 06:47:54.782053       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0428 06:47:54.782082       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0428 06:47:54.782091       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0428 06:47:54.782159       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0428 06:47:54.784930       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0428 06:47:54.790368       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0428 06:47:54.794274       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0428 06:47:54.794362       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0428 06:47:54.797504       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0428 06:47:54.799240       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0428 06:47:54.801459       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0428 06:47:54.803218       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0428 06:47:54.805332       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0428 06:47:54.813611       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0428 06:47:54.819091       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0428 06:47:54.822128       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0428 06:47:54.824538       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0428 06:47:54.827025       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0428 06:47:54.827063       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0428 06:47:54.827066       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0428 06:47:54.829925       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0428 06:47:54.832889       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0428 06:47:54.835341       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0428 06:47:54.839244       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.841272       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.842624       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.843231       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.856510       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.872893       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.904952       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.925583       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.933926       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:47:54.946262       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 06:48:05.108519       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 06:48:05.108501736 +0000 UTC m=+10.390349683
I0428 06:48:05.766553       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:48:05.766542123 +0000 UTC m=+11.048390070
I0428 06:48:05.768725       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:48:05.768764       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 06:48:05.768756268 +0000 UTC m=+11.050604245
E0428 06:48:05.780315       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 06:48:05.780379       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 06:48:05.780373125 +0000 UTC m=+11.062221072
E0428 06:48:05.780398       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 06:48:05.783291       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:48:05.783391       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:48:05.783449       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 06:48:05.783441707 +0000 UTC m=+11.065289654
E0428 06:48:05.792801       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0428 06:48:05.793066       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 06:48:05.793275       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 06:48:05.793368       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0428 06:48:05.824634       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xlxjk" condition "Approved" to 2026-04-28 06:48:05.824622667 +0000 UTC m=+11.106470614
I0428 06:48:05.840113       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xlxjk" condition "Ready" to 2026-04-28 06:48:05.840101751 +0000 UTC m=+11.121949698
I0428 06:48:05.860625       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:48:05.8606114 +0000 UTC m=+11.142459347
I0428 06:48:05.878302       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:48:10.793623       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:48:10.793609128 +0000 UTC m=+16.075457095
I0428 06:48:30.221747       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 06:48:30.22173199 +0000 UTC m=+35.503579937
I0428 06:48:30.221947       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:48:30.222021       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 06:48:30.222009614 +0000 UTC m=+35.503857561
I0428 06:48:30.237436       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 06:48:30.237419391 +0000 UTC m=+35.519267338
I0428 06:48:30.256908       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:48:30.257083       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 06:48:30.257062071 +0000 UTC m=+35.538910018
I0428 06:48:30.428497       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:48:30.467160       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-256qb" condition "Approved" to 2026-04-28 06:48:30.46714609 +0000 UTC m=+35.748994067
I0428 06:48:30.495486       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-256qb" condition "Ready" to 2026-04-28 06:48:30.495474602 +0000 UTC m=+35.777322549
I0428 06:48:30.526169       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:48:30.526152492 +0000 UTC m=+35.808000469
I0428 06:48:30.547004       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:48:30.548315       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:48:30.548307396 +0000 UTC m=+35.830155343
I0428 06:48:30.572074       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:48:30.572893       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:48:30.572869982 +0000 UTC m=+35.854717929
I0428 06:48:30.578592       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:52:59.647607       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-04-28 06:52:59.647578938 +0000 UTC m=+304.929426885
I0428 06:52:59.648326       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:52:59.648348       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-04-28 06:52:59.64834372 +0000 UTC m=+304.930191667
I0428 06:52:59.685317       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:52:59.685389       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-04-28 06:52:59.68538032 +0000 UTC m=+304.967228267
I0428 06:52:59.896153       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:52:59.928889       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-nr9k5" condition "Approved" to 2026-04-28 06:52:59.928871292 +0000 UTC m=+305.210719239
I0428 06:52:59.958269       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-nr9k5" condition "Ready" to 2026-04-28 06:52:59.958260076 +0000 UTC m=+305.240108013
I0428 06:52:59.993766       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:52:59.993753506 +0000 UTC m=+305.275601483
I0428 06:53:00.022988       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:53:00.023385       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:53:00.023377034 +0000 UTC m=+305.305224981
I0428 06:53:00.041473       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:53:00.042147       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:53:00.04213296 +0000 UTC m=+305.323980917
I0428 06:53:00.047090       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:01.307753       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 06:54:01.307722453 +0000 UTC m=+366.589570400
I0428 06:54:01.307760       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:54:01.307932       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 06:54:01.307917047 +0000 UTC m=+366.589765014
E0428 06:54:01.321529       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 06:54:01.321582       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 06:54:01.321574121 +0000 UTC m=+366.603422068
E0428 06:54:01.321645       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 06:54:01.323952       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:01.324010       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:54:01.324055       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 06:54:01.324048756 +0000 UTC m=+366.605896703
E0428 06:54:01.335811       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0428 06:54:01.335906       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 06:54:01.335937       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 06:54:01.335981       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0428 06:54:01.360042       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:01.366423       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nzqqf" condition "Approved" to 2026-04-28 06:54:01.366408626 +0000 UTC m=+366.648256573
I0428 06:54:01.381643       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nzqqf" condition "Ready" to 2026-04-28 06:54:01.381628674 +0000 UTC m=+366.663476611
I0428 06:54:01.407837       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:01.407822757 +0000 UTC m=+366.689670704
I0428 06:54:01.457766       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:01.463779       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:01.469754       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:01.469733822 +0000 UTC m=+366.751581759
I0428 06:54:01.498847       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:01.499131       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:01.499124474 +0000 UTC m=+366.780972411
I0428 06:54:06.336481       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:06.336466261 +0000 UTC m=+371.618314238
I0428 06:54:48.907045       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:54:48.907105       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 06:54:48.907087082 +0000 UTC m=+414.188935009
I0428 06:54:48.907298       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:54:48.907295127 +0000 UTC m=+414.189143064
I0428 06:54:48.940882       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:54:48.940867543 +0000 UTC m=+414.222715490
I0428 06:54:48.941784       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:54:48.941810       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 06:54:48.941805431 +0000 UTC m=+414.223653378
I0428 06:54:48.946881       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:54:48.946901       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 06:54:48.946898303 +0000 UTC m=+414.228746230
I0428 06:54:48.947303       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 06:54:48.947298931 +0000 UTC m=+414.229146868
I0428 06:54:48.948769       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:48.948829       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:54:48.94882341 +0000 UTC m=+414.230671347
I0428 06:54:48.981169       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:48.981257       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 06:54:48.981248684 +0000 UTC m=+414.263096621
I0428 06:54:48.998970       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:48.999043       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:54:48.999036326 +0000 UTC m=+414.280884273
I0428 06:54:49.112443       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:49.147438       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7bbf8" condition "Approved" to 2026-04-28 06:54:49.147421334 +0000 UTC m=+414.429269281
I0428 06:54:49.170060       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7bbf8" condition "Ready" to 2026-04-28 06:54:49.170043021 +0000 UTC m=+414.451890988
I0428 06:54:49.200471       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:49.200553       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:49.200537875 +0000 UTC m=+414.482385822
I0428 06:54:49.235772       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:49.239554       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:49.257162       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qbxth" condition "Approved" to 2026-04-28 06:54:49.257148405 +0000 UTC m=+414.538996352
I0428 06:54:49.300453       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ww977" condition "Approved" to 2026-04-28 06:54:49.300432403 +0000 UTC m=+414.582280370
I0428 06:54:49.303429       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qbxth" condition "Ready" to 2026-04-28 06:54:49.303420532 +0000 UTC m=+414.585268479
I0428 06:54:49.457445       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ww977" condition "Ready" to 2026-04-28 06:54:49.45743455 +0000 UTC m=+414.739282487
I0428 06:54:49.895826       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:49.895810207 +0000 UTC m=+415.177658154
I0428 06:54:50.002486       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:50.002474168 +0000 UTC m=+415.284322115
I0428 06:54:50.149529       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:50.150117       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:50.150093744 +0000 UTC m=+415.431941691
I0428 06:54:50.197339       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:50.300813       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:50.599428       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:50.644824       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:50.952670       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:57.383514       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" condition "Ready" to 2026-04-28 06:54:57.383472672 +0000 UTC m=+422.665320649
I0428 06:54:57.383785       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:54:57.383842       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" condition "Issuing" to 2026-04-28 06:54:57.383832789 +0000 UTC m=+422.665680736
I0428 06:54:57.400599       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-snjcp-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:57.400677       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:54:57.400698       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" condition "Issuing" to 2026-04-28 06:54:57.400689797 +0000 UTC m=+422.682537744
I0428 06:54:57.679999       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-snjcp-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:54:57.694722       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-snjcp-klmrk" condition "Approved" to 2026-04-28 06:54:57.694707723 +0000 UTC m=+422.976555670
I0428 06:54:57.730747       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-snjcp-klmrk" condition "Ready" to 2026-04-28 06:54:57.730733554 +0000 UTC m=+423.012581491
I0428 06:54:57.791378       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:54:57.791359915 +0000 UTC m=+423.073207862
I0428 06:54:57.835997       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-snjcp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-snjcp-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:55:09.839790       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 06:55:09.839770295 +0000 UTC m=+435.121618242
I0428 06:55:09.840247       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:55:09.840300       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:55:09.840289244 +0000 UTC m=+435.122137181
I0428 06:55:09.864664       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:55:09.864781       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:55:09.864804       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:55:09.864797521 +0000 UTC m=+435.146645458
I0428 06:55:10.065984       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hs65c" condition "Approved" to 2026-04-28 06:55:10.065953986 +0000 UTC m=+435.347801923
I0428 06:55:10.092745       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hs65c" condition "Ready" to 2026-04-28 06:55:10.092728854 +0000 UTC m=+435.374576801
I0428 06:55:10.132465       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:55:10.132454619 +0000 UTC m=+435.414302566
I0428 06:55:10.161867       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:55:10.162298       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:55:10.162287725 +0000 UTC m=+435.444135662
I0428 06:55:10.190945       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:58:14.251607       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 06:58:14.25155605 +0000 UTC m=+619.533404027
I0428 06:58:14.251752       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:58:14.251813       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 06:58:14.251804534 +0000 UTC m=+619.533652481
I0428 06:58:14.268132       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:58:14.268252       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 06:58:14.268239959 +0000 UTC m=+619.550087936
I0428 06:58:14.541658       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:58:14.577412       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w5wwx" condition "Approved" to 2026-04-28 06:58:14.577396863 +0000 UTC m=+619.859244810
I0428 06:58:14.605361       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w5wwx" condition "Ready" to 2026-04-28 06:58:14.605347928 +0000 UTC m=+619.887195855
I0428 06:58:14.639395       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:14.639372328 +0000 UTC m=+619.921220305
I0428 06:58:14.664177       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:58:14.738900       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:58:52.402175       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 06:58:52.402421       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 06:58:52.402368247 +0000 UTC m=+657.684216224
I0428 06:58:52.403130       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 06:58:52.403106368 +0000 UTC m=+657.684954325
I0428 06:58:52.424839       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:58:52.425060       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 06:58:52.425051184 +0000 UTC m=+657.706899121
I0428 06:58:52.491303       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 06:58:52.522990       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ql4pg" condition "Approved" to 2026-04-28 06:58:52.522973592 +0000 UTC m=+657.804821529
I0428 06:58:52.551529       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-ql4pg" condition "Ready" to 2026-04-28 06:58:52.551514368 +0000 UTC m=+657.833362315
I0428 06:58:52.590169       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:58:52.590099009 +0000 UTC m=+657.871946946
I0428 06:58:52.614130       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"