I0625 19:40:37.524136       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0625 19:40:37.524281       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0625 19:40:37.527723       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0625 19:40:37.527771       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0625 19:40:37.527787       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0625 19:40:37.528348       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0625 19:40:37.528477       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0625 19:40:37.528341       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0625 19:40:37.535218       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0625 19:40:37.549317       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0625 19:40:37.554095       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0625 19:40:37.557543       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0625 19:40:37.557613       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0625 19:40:37.557651       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0625 19:40:37.557638       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0625 19:40:37.560418       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0625 19:40:37.564912       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0625 19:40:37.567623       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0625 19:40:37.570181       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0625 19:40:37.572598       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0625 19:40:37.574903       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0625 19:40:37.575066       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0625 19:40:37.580593       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0625 19:40:37.581880       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0625 19:40:37.583621       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0625 19:40:37.585246       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0625 19:40:37.585362       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0625 19:40:37.587028       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0625 19:40:37.588779       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0625 19:40:37.590529       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0625 19:40:37.592361       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0625 19:40:37.596173       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0625 19:40:37.599665       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0625 19:40:37.599985       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0625 19:40:37.603046       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.603471       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.603926       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.604063       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.604334       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.605010       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.625606       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.644979       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.660312       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.678417       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:37.691426       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0625 19:40:48.101058       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-25 19:40:48.101041856 +0000 UTC m=+10.600096694
I0625 19:40:48.800741       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-25 19:40:48.800728227 +0000 UTC m=+11.299783085
I0625 19:40:48.801095       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:40:48.801151       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-25 19:40:48.801140001 +0000 UTC m=+11.300194869
I0625 19:40:48.810472       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:40:48.810528       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-25 19:40:48.810522334 +0000 UTC m=+11.309577172
E0625 19:40:48.815701       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0625 19:40:48.815748       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-25 19:40:48.815739578 +0000 UTC m=+11.314794416
E0625 19:40:48.815834       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0625 19:40:48.821646       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0625 19:40:48.831894       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0625 19:40:48.832137       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0625 19:40:48.832172       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0625 19:40:48.832210       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0625 19:40:48.849641       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-06-25 19:40:48.849629285 +0000 UTC m=+11.348684123
I0625 19:40:48.867003       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-06-25 19:40:48.866993124 +0000 UTC m=+11.366047962
I0625 19:40:48.890355       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:40:48.890340015 +0000 UTC m=+11.389394873
I0625 19:40:48.906163       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:40:48.906430       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:40:48.906424038 +0000 UTC m=+11.405478876
I0625 19:40:48.918625       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:40:53.832964       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:40:53.832952243 +0000 UTC m=+16.332007071
I0625 19:41:15.711699       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:41:15.711778       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-25 19:41:15.711757491 +0000 UTC m=+38.210812329
I0625 19:41:15.712270       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-25 19:41:15.712265188 +0000 UTC m=+38.211320026
I0625 19:41:15.724284       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-25 19:41:15.724273084 +0000 UTC m=+38.223327922
I0625 19:41:15.728387       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:41:15.728533       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-25 19:41:15.7285217 +0000 UTC m=+38.227576528
I0625 19:41:15.859198       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:41:15.884436       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-06-25 19:41:15.884419446 +0000 UTC m=+38.383474304
I0625 19:41:15.916456       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-06-25 19:41:15.916437914 +0000 UTC m=+38.415492782
I0625 19:41:15.945718       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:41:15.945704785 +0000 UTC m=+38.444759623
I0625 19:41:15.960840       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:45:37.825114       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:45:37.825167       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Issuing" to 2026-06-25 19:45:37.825159568 +0000 UTC m=+300.324214406
I0625 19:45:37.825524       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Ready" to 2026-06-25 19:45:37.825519224 +0000 UTC m=+300.324574072
I0625 19:45:37.843757       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:45:37.843803       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:45:37.843819       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Issuing" to 2026-06-25 19:45:37.843813892 +0000 UTC m=+300.342868720
I0625 19:45:38.195957       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-44.nip.io-tls-1" condition "Approved" to 2026-06-25 19:45:38.195934912 +0000 UTC m=+300.694989770
I0625 19:45:38.210294       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-44.nip.io-tls-1" condition "Ready" to 2026-06-25 19:45:38.210277903 +0000 UTC m=+300.709332771
I0625 19:45:38.232830       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:45:38.232817533 +0000 UTC m=+300.731872371
I0625 19:45:38.243248       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:45:38.243878       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:45:38.243870949 +0000 UTC m=+300.742925787
I0625 19:45:38.254835       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:45:38.255394       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:46:42.738070       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-25 19:46:42.738055093 +0000 UTC m=+365.237109951
I0625 19:46:42.738590       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:46:42.738653       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-25 19:46:42.738646583 +0000 UTC m=+365.237701451
E0625 19:46:42.808031       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0625 19:46:42.808112       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-25 19:46:42.808095878 +0000 UTC m=+365.307150756
E0625 19:46:42.808152       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0625 19:46:42.808612       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:46:42.808854       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-25 19:46:42.808840531 +0000 UTC m=+365.307895389
E0625 19:46:42.843665       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
I0625 19:46:42.844056       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0625 19:46:42.844292       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0625 19:46:42.844357       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0625 19:46:42.844397       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
I0625 19:46:42.862257       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:46:42.930922       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-06-25 19:46:42.930909383 +0000 UTC m=+365.429964231
I0625 19:46:42.989141       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-06-25 19:46:42.989127096 +0000 UTC m=+365.488181934
I0625 19:46:43.076858       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:46:43.076845683 +0000 UTC m=+365.575900511
I0625 19:46:43.127087       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:46:43.127392       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:46:43.127385485 +0000 UTC m=+365.626440313
I0625 19:46:43.166040       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:46:43.170321       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:46:47.844553       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:46:47.844538873 +0000 UTC m=+370.343593731
I0625 19:47:28.267600       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-25 19:47:28.267567428 +0000 UTC m=+410.766622296
I0625 19:47:28.268185       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:47:28.268208       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-25 19:47:28.268203689 +0000 UTC m=+410.767258537
I0625 19:47:28.268683       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-25 19:47:28.268676947 +0000 UTC m=+410.767731795
I0625 19:47:28.269269       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:47:28.269290       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-25 19:47:28.269285597 +0000 UTC m=+410.768340445
I0625 19:47:28.275562       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:47:28.275597       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-25 19:47:28.275590166 +0000 UTC m=+410.774644994
I0625 19:47:28.276707       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-25 19:47:28.276693295 +0000 UTC m=+410.775748123
I0625 19:47:28.294149       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:28.298009       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:47:28.298046       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-25 19:47:28.298034191 +0000 UTC m=+410.797089029
I0625 19:47:28.353691       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:28.353795       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-25 19:47:28.353784688 +0000 UTC m=+410.852839526
I0625 19:47:28.357861       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:28.358490       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:47:28.358610       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-25 19:47:28.35859934 +0000 UTC m=+410.857654178
I0625 19:47:28.600937       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-06-25 19:47:28.600923938 +0000 UTC m=+411.099978766
I0625 19:47:28.632377       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-06-25 19:47:28.632365248 +0000 UTC m=+411.131420086
I0625 19:47:28.662875       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:28.674793       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:28.674781166 +0000 UTC m=+411.173836014
I0625 19:47:28.697188       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-06-25 19:47:28.6971728 +0000 UTC m=+411.196227638
I0625 19:47:28.734590       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:28.735251       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-06-25 19:47:28.735240094 +0000 UTC m=+411.234294942
I0625 19:47:28.736838       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-06-25 19:47:28.73682739 +0000 UTC m=+411.235882228
I0625 19:47:28.776170       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-06-25 19:47:28.776165185 +0000 UTC m=+411.275220013
I0625 19:47:29.060004       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:29.059986126 +0000 UTC m=+411.559040954
I0625 19:47:29.268618       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:29.268601077 +0000 UTC m=+411.767655995
I0625 19:47:29.336848       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:29.337774       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:29.337757333 +0000 UTC m=+411.836812201
I0625 19:47:29.503614       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:29.504758       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:29.50474787 +0000 UTC m=+412.003802718
I0625 19:47:29.755764       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:29.884304       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:30.001063       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:30.046195       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:37.800538       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" condition "Ready" to 2026-06-25 19:47:37.800506955 +0000 UTC m=+420.299561793
I0625 19:47:37.800884       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:47:37.800997       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" condition "Issuing" to 2026-06-25 19:47:37.800986933 +0000 UTC m=+420.300041771
I0625 19:47:37.812676       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:37.812860       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:47:37.812922       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" condition "Issuing" to 2026-06-25 19:47:37.812915598 +0000 UTC m=+420.311970436
I0625 19:47:38.030193       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls-1" condition "Approved" to 2026-06-25 19:47:38.03017564 +0000 UTC m=+420.529230498
I0625 19:47:38.044585       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls-1" condition "Ready" to 2026-06-25 19:47:38.044575827 +0000 UTC m=+420.543630655
I0625 19:47:38.064390       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:38.064377297 +0000 UTC m=+420.563432125
I0625 19:47:38.077681       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:38.078068       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:38.078060252 +0000 UTC m=+420.577115080
I0625 19:47:38.094529       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l5mj8-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:49.319562       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:47:49.319601       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-25 19:47:49.319590675 +0000 UTC m=+431.818645513
I0625 19:47:49.320789       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-25 19:47:49.320782626 +0000 UTC m=+431.819837464
I0625 19:47:49.333093       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:49.333200       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-25 19:47:49.333186209 +0000 UTC m=+431.832241067
I0625 19:47:49.717218       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:49.740351       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-06-25 19:47:49.740338719 +0000 UTC m=+432.239393537
I0625 19:47:49.756867       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-06-25 19:47:49.756853904 +0000 UTC m=+432.255908752
I0625 19:47:49.800558       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:49.800544895 +0000 UTC m=+432.299599743
I0625 19:47:49.812671       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:49.813131       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:47:49.813125521 +0000 UTC m=+432.312180349
I0625 19:47:49.835742       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:47:49.840421       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:51:12.656970       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-25 19:51:12.656949236 +0000 UTC m=+635.156004074
I0625 19:51:12.657346       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:51:12.657410       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-25 19:51:12.657401115 +0000 UTC m=+635.156455953
I0625 19:51:12.669765       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:51:12.669831       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:51:12.669852       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-25 19:51:12.669844365 +0000 UTC m=+635.168899193
I0625 19:51:12.793639       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:51:12.812393       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-06-25 19:51:12.812382219 +0000 UTC m=+635.311437047
I0625 19:51:12.828720       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-06-25 19:51:12.82870879 +0000 UTC m=+635.327763628
I0625 19:51:12.851988       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:51:12.851973667 +0000 UTC m=+635.351028505
I0625 19:51:12.865932       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:51:12.908915       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:51:54.952851       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-25 19:51:54.95283856 +0000 UTC m=+677.451893388
I0625 19:51:54.952894       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:51:54.955451       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-25 19:51:54.955406113 +0000 UTC m=+677.454460971
I0625 19:51:54.969210       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:51:54.969282       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0625 19:51:54.969304       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-25 19:51:54.969298457 +0000 UTC m=+677.468353295
I0625 19:51:55.329597       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0625 19:51:55.340755       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-06-25 19:51:55.340744981 +0000 UTC m=+677.839799809
I0625 19:51:55.356445       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-06-25 19:51:55.356436123 +0000 UTC m=+677.855490961
I0625 19:51:55.381316       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-25 19:51:55.381306201 +0000 UTC m=+677.880361039
I0625 19:51:55.398316       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"