I0409 13:23:17.912614       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0409 13:23:17.912822       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0409 13:23:17.929024       1 options.go:259] "enabling the sig-network Gateway API certificate-shim and HTTP-01 solver" logger="cert-manager"
I0409 13:23:17.929123       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers gateway-shim ingress-shim issuers orders]" logger="cert-manager.controller"
I0409 13:23:17.929156       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0409 13:23:17.929174       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0409 13:23:17.929804       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0409 13:23:17.930419       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0409 13:23:17.930570       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0409 13:23:17.936896       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0409 13:23:17.944100       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0409 13:23:17.951051       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0409 13:23:17.959341       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0409 13:23:17.964218       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0409 13:23:17.967927       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0409 13:23:17.967987       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0409 13:23:17.971929       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0409 13:23:17.976036       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0409 13:23:17.985915       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0409 13:23:17.990737       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0409 13:23:17.995736       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0409 13:23:17.999552       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0409 13:23:17.999615       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0409 13:23:17.999705       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0409 13:23:18.004836       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="gateway-shim"
I0409 13:23:18.009903       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0409 13:23:18.009980       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0409 13:23:18.019581       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0409 13:23:18.023968       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0409 13:23:18.028842       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0409 13:23:18.035746       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0409 13:23:18.039954       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0409 13:23:18.040319       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0409 13:23:18.044492       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0409 13:23:18.049553       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0409 13:23:18.054814       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.055835       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.055874       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.056559       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.057486       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.058654       1 reflector.go:359] Caches populated for *v1.HTTPRoute from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.058938       1 reflector.go:359] Caches populated for *v1.Gateway from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.059355       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.076626       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.097313       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.115394       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.132039       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:18.148859       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0409 13:23:28.932588       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 13:23:28.932553769 +0000 UTC m=+11.045208164
I0409 13:23:29.664178       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:23:29.664231       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 13:23:29.664222852 +0000 UTC m=+11.776877217
I0409 13:23:29.664683       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 13:23:29.664674759 +0000 UTC m=+11.777329124
E0409 13:23:29.680071       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0409 13:23:29.680231       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 13:23:29.680212964 +0000 UTC m=+11.792867329
E0409 13:23:29.680290       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0409 13:23:29.681041       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:23:29.681112       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:23:29.681143       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 13:23:29.681135628 +0000 UTC m=+11.793789993
E0409 13:23:29.692778       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0409 13:23:29.692898       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 13:23:29.692942       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 13:23:29.693000       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0409 13:23:29.716028       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:23:29.729092       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-04-09 13:23:29.729077841 +0000 UTC m=+11.841732206
I0409 13:23:29.756669       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-04-09 13:23:29.756653451 +0000 UTC m=+11.869307816
I0409 13:23:29.783639       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:23:29.783622179 +0000 UTC m=+11.896276544
I0409 13:23:29.801147       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:23:29.837776       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:23:34.694353       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:23:34.69429619 +0000 UTC m=+16.806950585
I0409 13:24:01.086412       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:24:01.086498       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 13:24:01.086490307 +0000 UTC m=+43.199144672
I0409 13:24:01.087940       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 13:24:01.085536101 +0000 UTC m=+43.198190466
I0409 13:24:01.096878       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 13:24:01.096861504 +0000 UTC m=+43.209515899
I0409 13:24:01.106344       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:24:01.106502       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:24:01.106543       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 13:24:01.106531812 +0000 UTC m=+43.219186167
I0409 13:24:01.383736       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-04-09 13:24:01.383716288 +0000 UTC m=+43.496370683
I0409 13:24:01.454979       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-04-09 13:24:01.454961841 +0000 UTC m=+43.567616206
I0409 13:24:01.493727       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:24:01.493697596 +0000 UTC m=+43.606351981
I0409 13:24:01.515635       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:24:01.558712       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:28:40.572386       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:28:40.572453       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-132.nip.io-tls" condition "Issuing" to 2026-04-09 13:28:40.572442427 +0000 UTC m=+322.685096802
I0409 13:28:40.572984       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-132.nip.io-tls" condition "Ready" to 2026-04-09 13:28:40.572978333 +0000 UTC m=+322.685632698
I0409 13:28:40.582964       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:28:40.583024       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:28:40.583157       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-132.nip.io-tls" condition "Issuing" to 2026-04-09 13:28:40.583146421 +0000 UTC m=+322.695800786
I0409 13:28:41.022882       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:28:41.038215       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-132.nip.io-tls-1" condition "Approved" to 2026-04-09 13:28:41.038184041 +0000 UTC m=+323.150838436
I0409 13:28:41.057434       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-132.nip.io-tls-1" condition "Ready" to 2026-04-09 13:28:41.057418845 +0000 UTC m=+323.170073210
I0409 13:28:41.080424       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:28:41.080411305 +0000 UTC m=+323.193065670
I0409 13:28:41.095921       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:28:41.131501       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:28:42.401683       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="envoy-gateway-system/gateway-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:28:42.401732       1 conditions.go:203] Setting lastTransitionTime for Certificate "gateway-tls" condition "Issuing" to 2026-04-09 13:28:42.401720348 +0000 UTC m=+324.514374733
I0409 13:28:42.401819       1 conditions.go:203] Setting lastTransitionTime for Certificate "gateway-tls" condition "Ready" to 2026-04-09 13:28:42.40179967 +0000 UTC m=+324.514454035
I0409 13:28:42.411724       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="envoy-gateway-system/gateway-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"gateway-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:28:42.411775       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="envoy-gateway-system/gateway-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:28:42.411790       1 conditions.go:203] Setting lastTransitionTime for Certificate "gateway-tls" condition "Issuing" to 2026-04-09 13:28:42.411782942 +0000 UTC m=+324.524437297
I0409 13:28:42.567797       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "gateway-tls-1" condition "Approved" to 2026-04-09 13:28:42.567783935 +0000 UTC m=+324.680438330
I0409 13:28:42.585162       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "gateway-tls-1" condition "Ready" to 2026-04-09 13:28:42.585150074 +0000 UTC m=+324.697804429
I0409 13:28:42.624130       1 conditions.go:192] Found status change for Certificate "gateway-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:28:42.624114912 +0000 UTC m=+324.736769267
I0409 13:28:42.643570       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="envoy-gateway-system/gateway-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"gateway-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:28:42.682734       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="envoy-gateway-system/gateway-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"gateway-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:29:51.115650       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 13:29:51.115595531 +0000 UTC m=+393.228249926
I0409 13:29:51.116392       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:29:51.116485       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 13:29:51.116468371 +0000 UTC m=+393.229122756
E0409 13:29:51.130531       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0409 13:29:51.130595       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 13:29:51.130589018 +0000 UTC m=+393.243243373
E0409 13:29:51.130613       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0409 13:29:51.132383       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:29:51.132494       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:29:51.132522       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 13:29:51.132513641 +0000 UTC m=+393.245167996
E0409 13:29:51.141824       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
E0409 13:29:51.141894       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 13:29:51.141922       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0409 13:29:51.142043       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
I0409 13:29:51.178052       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-04-09 13:29:51.178026854 +0000 UTC m=+393.290681249
I0409 13:29:51.195145       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-04-09 13:29:51.195121098 +0000 UTC m=+393.307775493
I0409 13:29:51.216056       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:29:51.216038718 +0000 UTC m=+393.328693083
I0409 13:29:51.235846       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:29:51.236140       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:29:51.23613407 +0000 UTC m=+393.348788415
I0409 13:29:51.257957       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:29:56.142427       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:29:56.142411434 +0000 UTC m=+398.255065829
I0409 13:30:45.195295       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:30:45.195360       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" condition "Issuing" to 2026-04-09 13:30:45.195347011 +0000 UTC m=+447.308001396
I0409 13:30:45.195792       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" condition "Ready" to 2026-04-09 13:30:45.19577422 +0000 UTC m=+447.308428585
I0409 13:30:45.203959       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:30:45.204047       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" condition "Ready" to 2026-04-09 13:30:45.204040893 +0000 UTC m=+447.316695268
I0409 13:30:45.322547       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:30:45.349585       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls-1" condition "Approved" to 2026-04-09 13:30:45.349569545 +0000 UTC m=+447.462223910
I0409 13:30:45.405815       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls-1" condition "Ready" to 2026-04-09 13:30:45.405801584 +0000 UTC m=+447.518455939
I0409 13:30:45.458958       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:30:45.458948993 +0000 UTC m=+447.571603348
I0409 13:30:45.480428       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:30:45.495879       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pjlvz-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:30:58.135896       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:30:58.135956       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 13:30:58.135945983 +0000 UTC m=+460.248600338
I0409 13:30:58.136062       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 13:30:58.136035945 +0000 UTC m=+460.248690310
I0409 13:30:58.148035       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:30:58.148091       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 13:30:58.148086487 +0000 UTC m=+460.260740832
I0409 13:30:58.362073       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:30:58.390444       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-04-09 13:30:58.390424007 +0000 UTC m=+460.503078372
I0409 13:30:58.409115       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-04-09 13:30:58.409096796 +0000 UTC m=+460.521751161
I0409 13:30:58.445967       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:30:58.445950135 +0000 UTC m=+460.558604500
I0409 13:30:58.467233       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:34:26.304737       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:34:26.304812       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 13:34:26.304802763 +0000 UTC m=+668.417457128
I0409 13:34:26.304955       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 13:34:26.304932795 +0000 UTC m=+668.417587190
I0409 13:34:26.316800       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:34:26.316861       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 13:34:26.31685472 +0000 UTC m=+668.429509075
I0409 13:34:26.556294       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:34:26.588884       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-04-09 13:34:26.588868845 +0000 UTC m=+668.701523230
I0409 13:34:26.605719       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-04-09 13:34:26.605708705 +0000 UTC m=+668.718363070
I0409 13:34:26.627368       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:34:26.62735414 +0000 UTC m=+668.740008505
I0409 13:34:26.642856       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:34:26.643542       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:34:26.64353606 +0000 UTC m=+668.756190415
I0409 13:34:26.649009       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:34:26.660971       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:35:11.595623       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0409 13:35:11.595685       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-09 13:35:11.59567532 +0000 UTC m=+713.708329705
I0409 13:35:11.596013       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 13:35:11.596006085 +0000 UTC m=+713.708660480
I0409 13:35:11.607049       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:35:11.614920       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-09 13:35:11.614904372 +0000 UTC m=+713.727558757
I0409 13:35:11.906163       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:35:11.938501       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-04-09 13:35:11.938489807 +0000 UTC m=+714.051144162
I0409 13:35:11.958995       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-04-09 13:35:11.958984938 +0000 UTC m=+714.071639293
I0409 13:35:11.987566       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:35:11.987547492 +0000 UTC m=+714.100201857
I0409 13:35:12.006720       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:35:12.007687       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 13:35:12.007673867 +0000 UTC m=+714.120328222
I0409 13:35:12.024507       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0409 13:35:12.028946       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"