I0417 18:40:40.582565       1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad"
I0417 18:40:40.582668       1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"]
W0417 18:40:40.582873       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0417 18:40:40.587935       1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]"
I0417 18:40:40.588301       1 controller.go:156] "cert-manager/controller: starting leader election"
I0417 18:40:40.588401       1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402"
I0417 18:40:40.588409       1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403"
I0417 18:40:40.590820       1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0417 18:40:40.603721       1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller
I0417 18:40:40.608187       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme"
I0417 18:40:40.608319       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned"
I0417 18:40:40.611138       1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers"
I0417 18:40:40.613738       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver"
I0417 18:40:40.619382       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics"
I0417 18:40:40.622130       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme"
I0417 18:40:40.623861       1 controller.go:226] "cert-manager/controller: starting controller" controller="orders"
I0417 18:40:40.625515       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca"
I0417 18:40:40.625711       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault"
I0417 18:40:40.627389       1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers"
I0417 18:40:40.629600       1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges"
I0417 18:40:40.631745       1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim"
I0417 18:40:40.633995       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing"
I0417 18:40:40.639849       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi"
I0417 18:40:40.639894       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim"
I0417 18:40:40.639910       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness"
I0417 18:40:40.643889       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault"
I0417 18:40:40.644033       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger"
I0417 18:40:40.646284       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca"
I0417 18:40:40.647948       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned"
I0417 18:40:40.648004       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi"
I0417 18:40:40.649829       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager"
I0417 18:40:40.651600       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager"
I0417 18:40:40.655344       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager"
I0417 18:40:52.350500       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 18:40:52.350445399 +0000 UTC m=+11.806372264
I0417 18:40:53.101310       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:40:53.101373       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:40:53.101365705 +0000 UTC m=+12.557292530
I0417 18:40:53.101724       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:40:53.101697273 +0000 UTC m=+12.557624128
E0417 18:40:53.115549       1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:40:53.115791       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 18:40:53.115780939 +0000 UTC m=+12.571707764
E0417 18:40:53.115949       1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:40:53.123635       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:53.123744       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:40:53.123733675 +0000 UTC m=+12.579660500
E0417 18:40:53.131966       1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere"
E0417 18:40:53.132069       1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:40:53.132098       1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:40:53.132128       1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere"
I0417 18:40:53.143183       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:53.143409       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:40:53.143370328 +0000 UTC m=+12.599297153
I0417 18:40:53.157854       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dn7xw" condition "Approved" to 2026-04-17 18:40:53.157840404 +0000 UTC m=+12.613767239
I0417 18:40:53.169663       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dn7xw" condition "Ready" to 2026-04-17 18:40:53.169647665 +0000 UTC m=+12.625574490
I0417 18:40:53.194941       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:53.194928777 +0000 UTC m=+12.650855602
I0417 18:40:53.210826       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:53.211113       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:53.211105704 +0000 UTC m=+12.667032539
I0417 18:40:53.225883       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:53.229594       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:40:58.132326       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:40:58.132315169 +0000 UTC m=+17.588241994
I0417 18:41:21.550658       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 18:41:21.550606105 +0000 UTC m=+41.006532940
I0417 18:41:21.551125       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:41:21.551155       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:41:21.551148685 +0000 UTC m=+41.007075540
I0417 18:41:21.571664       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 18:41:21.571652027 +0000 UTC m=+41.027578862
I0417 18:41:21.582485       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:41:21.582557       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:41:21.582586       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:41:21.582580756 +0000 UTC m=+41.038507601
I0417 18:41:21.836262       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sdpbw" condition "Approved" to 2026-04-17 18:41:21.836247531 +0000 UTC m=+41.292174366
I0417 18:41:21.866886       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sdpbw" condition "Ready" to 2026-04-17 18:41:21.866872636 +0000 UTC m=+41.322799471
I0417 18:41:21.909254       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:41:21.909238337 +0000 UTC m=+41.365165172
I0417 18:41:21.934231       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:44:09.495728       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-96.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:44:09.495728       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-96.nip.io-tls" condition "Ready" to 2026-04-17 18:44:09.495693915 +0000 UTC m=+208.951620770
I0417 18:44:09.495771       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-96.nip.io-tls" condition "Issuing" to 2026-04-17 18:44:09.495761017 +0000 UTC m=+208.951687872
I0417 18:44:09.512327       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-96.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-96.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:44:09.512408       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-96.nip.io-tls" condition "Ready" to 2026-04-17 18:44:09.512399201 +0000 UTC m=+208.968326036
I0417 18:44:09.622281       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-96.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-96.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:44:09.657097       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-96.nip.io-tls-w8k4r" condition "Approved" to 2026-04-17 18:44:09.657086408 +0000 UTC m=+209.113013243
I0417 18:44:09.691163       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-96.nip.io-tls-w8k4r" condition "Ready" to 2026-04-17 18:44:09.691152085 +0000 UTC m=+209.147078920
I0417 18:44:09.718649       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-96.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:44:09.718626591 +0000 UTC m=+209.174553446
I0417 18:44:09.738540       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-96.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-96.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:44:09.790345       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-96.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-96.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:06.249098       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:45:06.249049182 +0000 UTC m=+265.704976047
I0417 18:45:06.249405       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:45:06.249489       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:45:06.249442514 +0000 UTC m=+265.705369389
E0417 18:45:06.262643       1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:45:06.264117       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 18:45:06.26410598 +0000 UTC m=+265.720032845
E0417 18:45:06.264188       1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:45:06.264292       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:06.264344       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:45:06.264338887 +0000 UTC m=+265.720265722
E0417 18:45:06.276363       1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack"
E0417 18:45:06.277101       1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:45:06.277277       1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:45:06.277476       1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack"
I0417 18:45:06.284897       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:06.306767       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xk6z4" condition "Approved" to 2026-04-17 18:45:06.306751501 +0000 UTC m=+265.762678346
I0417 18:45:06.321844       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xk6z4" condition "Ready" to 2026-04-17 18:45:06.32182859 +0000 UTC m=+265.777755455
I0417 18:45:06.354374       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:06.354359829 +0000 UTC m=+265.810286654
I0417 18:45:06.373144       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:06.418319       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:11.277306       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:11.277289632 +0000 UTC m=+270.733216497
I0417 18:45:50.064979       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:45:50.064937251 +0000 UTC m=+309.520864076
I0417 18:45:50.065320       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:45:50.065339       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 18:45:50.065335911 +0000 UTC m=+309.521262726
I0417 18:45:50.081124       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:45:50.081115274 +0000 UTC m=+309.537042099
I0417 18:45:50.081401       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:45:50.081417       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 18:45:50.081414641 +0000 UTC m=+309.537341466
I0417 18:45:50.093204       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:45:50.093252       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:45:50.093246553 +0000 UTC m=+309.549173368
I0417 18:45:50.093917       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:45:50.093911349 +0000 UTC m=+309.549838174
I0417 18:45:50.152257       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.152466       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:45:50.152458792 +0000 UTC m=+309.608385647
I0417 18:45:50.167205       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.167399       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:45:50.167390382 +0000 UTC m=+309.623317217
I0417 18:45:50.174214       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.174280       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:45:50.174273958 +0000 UTC m=+309.630200783
I0417 18:45:50.328906       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.369533       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bjft6" condition "Approved" to 2026-04-17 18:45:50.369509765 +0000 UTC m=+309.825436600
I0417 18:45:50.399559       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.420160       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bjft6" condition "Ready" to 2026-04-17 18:45:50.420152526 +0000 UTC m=+309.876079351
I0417 18:45:50.430647       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.473220       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:50.473209448 +0000 UTC m=+309.929136283
I0417 18:45:50.476677       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x8ch2" condition "Approved" to 2026-04-17 18:45:50.476664806 +0000 UTC m=+309.932591641
I0417 18:45:50.498625       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.499183       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:50.49917399 +0000 UTC m=+309.955100825
I0417 18:45:50.501985       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x8ch2" condition "Ready" to 2026-04-17 18:45:50.501972821 +0000 UTC m=+309.957899656
I0417 18:45:50.534976       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.541986       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:50.541976941 +0000 UTC m=+309.997903776
I0417 18:45:50.650626       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:50.651148       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:50.651141434 +0000 UTC m=+310.107068269
I0417 18:45:51.001307       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:51.116636       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4pd5v" condition "Approved" to 2026-04-17 18:45:51.11662286 +0000 UTC m=+310.572549675
I0417 18:45:51.323953       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4pd5v" condition "Ready" to 2026-04-17 18:45:51.323940857 +0000 UTC m=+310.779867692
I0417 18:45:51.748779       1 issuing_controller.go:324] "cert-manager/certificates-issuing: next private key does not match CSR public key, waiting for requestmanager controller" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-4pd5v" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-xl6lz" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
I0417 18:45:51.909000       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-t6hrq" condition "Approved" to 2026-04-17 18:45:51.908986363 +0000 UTC m=+311.364913178
I0417 18:45:51.994867       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-t6hrq" condition "Ready" to 2026-04-17 18:45:51.994850485 +0000 UTC m=+311.450777340
E0417 18:45:52.300626       1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"prometheus-tls-xl6lz\" already exists" key="monitoring/prometheus-tls"
I0417 18:45:52.523791       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:52.523776413 +0000 UTC m=+311.979703248
I0417 18:45:52.603850       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:52.900835       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.338217       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" condition "Ready" to 2026-04-17 18:45:58.338200067 +0000 UTC m=+317.794126892
I0417 18:45:58.338405       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:45:58.338682       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" condition "Issuing" to 2026-04-17 18:45:58.338657608 +0000 UTC m=+317.794584453
I0417 18:45:58.354712       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6l48x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.354794       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:45:58.354845       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" condition "Issuing" to 2026-04-17 18:45:58.35484015 +0000 UTC m=+317.810766975
I0417 18:45:58.681035       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6l48x-zjtqb" condition "Approved" to 2026-04-17 18:45:58.681016868 +0000 UTC m=+318.136943703
I0417 18:45:58.707467       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6l48x-zjtqb" condition "Ready" to 2026-04-17 18:45:58.707457815 +0000 UTC m=+318.163384640
I0417 18:45:58.736533       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:58.736516967 +0000 UTC m=+318.192443802
I0417 18:45:58.753099       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6l48x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.753765       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:58.753756936 +0000 UTC m=+318.209683771
I0417 18:45:58.768962       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6l48x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:58.769491       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:58.769486217 +0000 UTC m=+318.225413042
I0417 18:45:58.798076       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6l48x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6l48x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:11.413110       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:46:11.413143       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 18:46:11.413132182 +0000 UTC m=+330.869059017
I0417 18:46:11.414734       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:46:11.413350867 +0000 UTC m=+330.869277722
I0417 18:46:11.436777       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:11.436851       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:46:11.436844549 +0000 UTC m=+330.892771374
I0417 18:46:11.724886       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:11.756972       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pj8lb" condition "Approved" to 2026-04-17 18:46:11.756961633 +0000 UTC m=+331.212888458
I0417 18:46:11.780973       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pj8lb" condition "Ready" to 2026-04-17 18:46:11.780963017 +0000 UTC m=+331.236889842
I0417 18:46:11.810235       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:11.810215726 +0000 UTC m=+331.266142561
I0417 18:46:11.829412       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:11.829971       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:11.829962169 +0000 UTC m=+331.285889004
I0417 18:46:11.856690       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:49:29.837720       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:49:29.837699208 +0000 UTC m=+529.293626033
I0417 18:49:29.837818       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:49:29.837909       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 18:49:29.837898351 +0000 UTC m=+529.293825206
I0417 18:49:29.865006       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:49:29.865256       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:49:29.865245925 +0000 UTC m=+529.321172750
I0417 18:49:30.118519       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:49:30.156762       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bqbxd" condition "Approved" to 2026-04-17 18:49:30.156742344 +0000 UTC m=+529.612669179
I0417 18:49:30.178791       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bqbxd" condition "Ready" to 2026-04-17 18:49:30.178775958 +0000 UTC m=+529.634702773
I0417 18:49:30.221123       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:49:30.221106644 +0000 UTC m=+529.677033479
I0417 18:49:30.257248       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:11.164504       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 18:50:11.164475862 +0000 UTC m=+570.620402687
I0417 18:50:11.165056       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:50:11.165073       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 18:50:11.165070071 +0000 UTC m=+570.620996896
I0417 18:50:11.193203       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:11.193317       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:50:11.193352       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 18:50:11.193342136 +0000 UTC m=+570.649268991
I0417 18:50:11.464062       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zwcm4" condition "Approved" to 2026-04-17 18:50:11.464041092 +0000 UTC m=+570.919967947
I0417 18:50:11.487272       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-zwcm4" condition "Ready" to 2026-04-17 18:50:11.487259733 +0000 UTC m=+570.943186568
I0417 18:50:11.534494       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:11.534479689 +0000 UTC m=+570.990406524
I0417 18:50:11.560154       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:11.560792       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:11.560782242 +0000 UTC m=+571.016709067
I0417 18:50:11.578585       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:11.579574       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:11.580328       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:11.580318903 +0000 UTC m=+571.036245728