I0507 01:59:46.653145       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0507 01:59:46.653253       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0507 01:59:46.653320       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0507 01:59:46.657049       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0507 01:59:46.657427       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0507 01:59:46.658347       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0507 01:59:46.658515       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0507 01:59:46.662156       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0507 01:59:46.680757       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0507 01:59:46.681031       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0507 01:59:46.684868       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0507 01:59:46.686716       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0507 01:59:46.689361       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0507 01:59:46.694172       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0507 01:59:46.696436       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0507 01:59:46.696470       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0507 01:59:46.696505       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0507 01:59:46.696537       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0507 01:59:46.698808       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0507 01:59:46.698830       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0507 01:59:46.701711       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0507 01:59:46.704173       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0507 01:59:46.706615       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0507 01:59:46.709059       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0507 01:59:46.709152       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0507 01:59:46.714340       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0507 01:59:46.718880       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0507 01:59:46.721989       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0507 01:59:46.724666       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0507 01:59:46.728257       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0507 01:59:46.732429       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0507 01:59:46.735326       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0507 01:59:46.738849       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0507 01:59:46.741551       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.741779       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.743487       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.743690       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.744042       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.744126       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.744255       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.744568       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.745447       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 01:59:46.831831       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:00:03.135583       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-07 02:00:03.135545407 +0000 UTC m=+16.510882766
I0507 02:00:03.882220       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-07 02:00:03.882206597 +0000 UTC m=+17.257543966
I0507 02:00:03.882669       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:00:03.882726       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-07 02:00:03.882716407 +0000 UTC m=+17.258053786
E0507 02:00:03.898088       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0507 02:00:03.898158       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-07 02:00:03.898150783 +0000 UTC m=+17.273488132
E0507 02:00:03.898186       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0507 02:00:03.903362       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:00:03.903614       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-07 02:00:03.903604251 +0000 UTC m=+17.278941620
E0507 02:00:03.911725       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0507 02:00:03.912136       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0507 02:00:03.912204       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0507 02:00:03.912354       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0507 02:00:03.922251       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:00:03.941958       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-szqvl" condition "Approved" to 2026-05-07 02:00:03.94194759 +0000 UTC m=+17.317284939
I0507 02:00:03.954240       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-szqvl" condition "Ready" to 2026-05-07 02:00:03.954230404 +0000 UTC m=+17.329567743
I0507 02:00:03.975918       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:00:03.975902884 +0000 UTC m=+17.351240243
I0507 02:00:03.994602       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:00:03.994956       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:00:03.994947682 +0000 UTC m=+17.370285041
I0507 02:00:04.010002       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:00:08.912550       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:00:08.912538158 +0000 UTC m=+22.287875527
I0507 02:00:33.644180       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:00:33.644254       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 02:00:33.644247067 +0000 UTC m=+47.019584426
I0507 02:00:33.644242       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-07 02:00:33.644215506 +0000 UTC m=+47.019552865
I0507 02:00:33.663458       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-07 02:00:33.663449147 +0000 UTC m=+47.038786486
I0507 02:00:33.670070       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:00:33.670141       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:00:33.670162       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-07 02:00:33.67015655 +0000 UTC m=+47.045493909
I0507 02:00:33.906618       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:00:33.916155       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k67v2" condition "Approved" to 2026-05-07 02:00:33.916140896 +0000 UTC m=+47.291478235
I0507 02:00:33.947846       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k67v2" condition "Ready" to 2026-05-07 02:00:33.947836434 +0000 UTC m=+47.323173793
I0507 02:00:33.979152       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:00:33.979135865 +0000 UTC m=+47.354473214
I0507 02:00:34.008085       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:04:43.919934       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:04:43.920119       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Issuing" to 2026-05-07 02:04:43.920107368 +0000 UTC m=+297.295444757
I0507 02:04:43.920471       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-05-07 02:04:43.92045214 +0000 UTC m=+297.295789529
I0507 02:04:43.941810       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:04:43.941911       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-05-07 02:04:43.941901442 +0000 UTC m=+297.317238801
I0507 02:04:44.115121       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:04:44.203765       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-nswg9" condition "Approved" to 2026-05-07 02:04:44.203745105 +0000 UTC m=+297.579082494
I0507 02:04:44.232761       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-nswg9" condition "Ready" to 2026-05-07 02:04:44.232746502 +0000 UTC m=+297.608083891
I0507 02:04:44.277999       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:04:44.277986237 +0000 UTC m=+297.653323616
I0507 02:04:44.307930       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:04:44.308210       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:04:44.308204404 +0000 UTC m=+297.683541763
I0507 02:04:44.322978       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:04:44.323370       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:04:44.323361625 +0000 UTC m=+297.698698984
I0507 02:05:47.603148       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-07 02:05:47.603120381 +0000 UTC m=+360.978457770
I0507 02:05:47.603379       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:05:47.603478       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 02:05:47.603464581 +0000 UTC m=+360.978801990
E0507 02:05:47.616161       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0507 02:05:47.616412       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-07 02:05:47.616401866 +0000 UTC m=+360.991739215
E0507 02:05:47.616525       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0507 02:05:47.617984       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:05:47.618208       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:05:47.618244       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-07 02:05:47.618234494 +0000 UTC m=+360.993571883
E0507 02:05:47.628977       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0507 02:05:47.629145       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0507 02:05:47.629314       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0507 02:05:47.629395       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0507 02:05:47.655750       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:05:47.657513       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z5mtf" condition "Approved" to 2026-05-07 02:05:47.657502332 +0000 UTC m=+361.032839701
I0507 02:05:47.673008       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z5mtf" condition "Ready" to 2026-05-07 02:05:47.672997563 +0000 UTC m=+361.048334922
I0507 02:05:47.692148       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:05:47.692103599 +0000 UTC m=+361.067440958
I0507 02:05:47.705766       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:05:52.629718       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:05:52.629709545 +0000 UTC m=+366.005046894
I0507 02:06:33.004207       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:06:33.004303       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-07 02:06:33.004292726 +0000 UTC m=+406.379630105
I0507 02:06:33.004583       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-07 02:06:33.004575893 +0000 UTC m=+406.379913252
I0507 02:06:33.009243       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:06:33.009289       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-07 02:06:33.00928078 +0000 UTC m=+406.384618139
I0507 02:06:33.013667       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-07 02:06:33.013650177 +0000 UTC m=+406.388987546
I0507 02:06:33.014994       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:06:33.015353       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-07 02:06:33.015339926 +0000 UTC m=+406.390677275
I0507 02:06:33.015022       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-07 02:06:33.015016909 +0000 UTC m=+406.390354268
I0507 02:06:33.046043       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:33.046160       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-07 02:06:33.04609148 +0000 UTC m=+406.421428839
I0507 02:06:33.049742       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:33.049861       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:06:33.049977       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-07 02:06:33.049970097 +0000 UTC m=+406.425307466
I0507 02:06:33.059067       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:33.059112       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-07 02:06:33.059106155 +0000 UTC m=+406.434443504
I0507 02:06:33.231560       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:33.319096       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:33.357477       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxrtz" condition "Approved" to 2026-05-07 02:06:33.35746691 +0000 UTC m=+406.732804259
I0507 02:06:33.373833       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxrtz" condition "Ready" to 2026-05-07 02:06:33.373823969 +0000 UTC m=+406.749161318
I0507 02:06:33.405421       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:06:33.405412032 +0000 UTC m=+406.780749371
I0507 02:06:33.435639       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
E0507 02:06:33.488078       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-rdxtr\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls"
I0507 02:06:33.546232       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9z8n2" condition "Approved" to 2026-05-07 02:06:33.546215632 +0000 UTC m=+406.921553001
I0507 02:06:33.577862       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9z8n2" condition "Ready" to 2026-05-07 02:06:33.577842975 +0000 UTC m=+406.953180314
I0507 02:06:33.682942       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fwndh" condition "Approved" to 2026-05-07 02:06:33.682927457 +0000 UTC m=+407.058264816
I0507 02:06:33.753869       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:06:33.753853439 +0000 UTC m=+407.129190798
I0507 02:06:33.883532       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fwndh" condition "Ready" to 2026-05-07 02:06:33.883520936 +0000 UTC m=+407.258858295
I0507 02:06:34.225473       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:34.225830       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:06:34.225824751 +0000 UTC m=+407.601162110
I0507 02:06:34.408311       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-fwndh" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-x24nc" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
E0507 02:06:34.775660       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-x24nc\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls"
I0507 02:06:34.829180       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:34.877824       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:34.932386       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vk8v4" condition "Approved" to 2026-05-07 02:06:34.932372339 +0000 UTC m=+408.307709718
I0507 02:06:35.088132       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vk8v4" condition "Ready" to 2026-05-07 02:06:35.088119712 +0000 UTC m=+408.463457071
I0507 02:06:35.531504       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:06:35.531488447 +0000 UTC m=+408.906825806
I0507 02:06:35.629060       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:35.629484       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:06:35.629476318 +0000 UTC m=+409.004813677
I0507 02:06:35.830515       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:41.975982       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:06:41.976019       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls" condition "Issuing" to 2026-05-07 02:06:41.976011624 +0000 UTC m=+415.351348983
I0507 02:06:41.976150       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls" condition "Ready" to 2026-05-07 02:06:41.976124257 +0000 UTC m=+415.351461616
I0507 02:06:41.991955       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:41.992115       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:06:41.992145       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls" condition "Issuing" to 2026-05-07 02:06:41.99213783 +0000 UTC m=+415.367475179
I0507 02:06:42.232664       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jxjhj-96hrs" condition "Approved" to 2026-05-07 02:06:42.232651444 +0000 UTC m=+415.607988793
I0507 02:06:42.249147       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jxjhj-96hrs" condition "Ready" to 2026-05-07 02:06:42.249137748 +0000 UTC m=+415.624475097
I0507 02:06:42.274226       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:06:42.274213781 +0000 UTC m=+415.649551130
I0507 02:06:42.306519       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jxjhj-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:54.481422       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:06:54.481449       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-07 02:06:54.48144327 +0000 UTC m=+427.856780619
I0507 02:06:54.481701       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-07 02:06:54.481697155 +0000 UTC m=+427.857034504
I0507 02:06:54.500740       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:54.500830       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-07 02:06:54.500819795 +0000 UTC m=+427.876157154
I0507 02:06:54.729554       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:54.765280       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6rx6k" condition "Approved" to 2026-05-07 02:06:54.765265554 +0000 UTC m=+428.140602893
I0507 02:06:54.787487       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6rx6k" condition "Ready" to 2026-05-07 02:06:54.787473979 +0000 UTC m=+428.162811328
I0507 02:06:54.819702       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:06:54.81968594 +0000 UTC m=+428.195023319
I0507 02:06:54.841880       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:06:54.842154       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:06:54.84214741 +0000 UTC m=+428.217484779
I0507 02:06:54.863643       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:10:07.678698       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-07 02:10:07.678681377 +0000 UTC m=+621.054018766
I0507 02:10:07.678746       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:10:07.678998       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-07 02:10:07.678985432 +0000 UTC m=+621.054322841
I0507 02:10:07.699856       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:10:07.699939       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:10:07.699963       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-07 02:10:07.699955224 +0000 UTC m=+621.075292583
I0507 02:10:07.984551       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4k269" condition "Approved" to 2026-05-07 02:10:07.984540199 +0000 UTC m=+621.359877558
I0507 02:10:08.004237       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4k269" condition "Ready" to 2026-05-07 02:10:08.00419549 +0000 UTC m=+621.379532859
I0507 02:10:08.033912       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:10:08.033895374 +0000 UTC m=+621.409232763
I0507 02:10:08.056210       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:10:08.056636       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:10:08.056630514 +0000 UTC m=+621.431967863
I0507 02:10:08.076849       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:10:08.077101       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:10:08.077094977 +0000 UTC m=+621.452432316
I0507 02:10:48.868389       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-07 02:10:48.868374117 +0000 UTC m=+662.243711506
I0507 02:10:48.868425       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:10:48.868620       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-07 02:10:48.86860554 +0000 UTC m=+662.243942909
I0507 02:10:48.885316       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:10:48.885405       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:10:48.885421       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-07 02:10:48.885415987 +0000 UTC m=+662.260753336
I0507 02:10:49.158341       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kb4qj" condition "Approved" to 2026-05-07 02:10:49.158330023 +0000 UTC m=+662.533667382
I0507 02:10:49.194044       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kb4qj" condition "Ready" to 2026-05-07 02:10:49.194034631 +0000 UTC m=+662.569371980
I0507 02:10:49.243499       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:10:49.243483537 +0000 UTC m=+662.618820896
I0507 02:10:49.258512       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:10:49.258833       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:10:49.25881334 +0000 UTC m=+662.634150689
I0507 02:10:49.275805       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"