I0407 03:23:11.454029       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0407 03:23:11.454170       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0407 03:23:11.454253       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0407 03:23:11.457887       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0407 03:23:11.458277       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0407 03:23:11.458411       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0407 03:23:11.458473       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0407 03:23:11.460967       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0407 03:23:11.478672       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0407 03:23:11.478874       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0407 03:23:11.478944       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0407 03:23:11.483865       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0407 03:23:11.483945       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0407 03:23:11.490531       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0407 03:23:11.494812       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0407 03:23:11.497867       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0407 03:23:11.499715       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0407 03:23:11.501394       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0407 03:23:11.501426       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0407 03:23:11.501584       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0407 03:23:11.503437       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0407 03:23:11.505347       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0407 03:23:11.511166       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0407 03:23:11.511265       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0407 03:23:11.514634       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0407 03:23:11.517084       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0407 03:23:11.519442       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0407 03:23:11.521835       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0407 03:23:11.523799       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0407 03:23:11.525609       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0407 03:23:11.527430       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0407 03:23:11.529711       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0407 03:23:11.535009       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0407 03:23:11.537562       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.537571       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.538444       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.553089       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.602884       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.610229       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.628705       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.635636       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.651251       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:11.672630       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 03:23:29.381452       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 03:23:29.381436266 +0000 UTC m=+17.961615374
I0407 03:23:30.144356       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 03:23:30.144343909 +0000 UTC m=+18.724522997
I0407 03:23:30.144801       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:23:30.144924       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 03:23:30.144848133 +0000 UTC m=+18.725027251
I0407 03:23:30.162790       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:30.162847       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 03:23:30.162841696 +0000 UTC m=+18.743020784
E0407 03:23:30.169190       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 03:23:30.169239       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 03:23:30.1692351 +0000 UTC m=+18.749414178
E0407 03:23:30.169254       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 03:23:30.179150       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:30.182892       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:30.182962       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 03:23:30.182954135 +0000 UTC m=+18.763133223
I0407 03:23:30.185752       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c2qlt" condition "Approved" to 2026-04-07 03:23:30.185726671 +0000 UTC m=+18.765905749
E0407 03:23:30.187243       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0407 03:23:30.187597       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 03:23:30.187636       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 03:23:30.188664       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0407 03:23:30.196996       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c2qlt" condition "Ready" to 2026-04-07 03:23:30.196983969 +0000 UTC m=+18.777163047
I0407 03:23:30.215440       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:23:30.215426673 +0000 UTC m=+18.795605751
I0407 03:23:30.228447       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:30.228867       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:23:30.22885904 +0000 UTC m=+18.809038118
I0407 03:23:30.251470       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:30.253281       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:35.188502       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:23:35.188489799 +0000 UTC m=+23.768668867
I0407 03:23:56.050533       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:23:56.050565       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 03:23:56.050559094 +0000 UTC m=+44.630738162
I0407 03:23:56.050981       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 03:23:56.050977653 +0000 UTC m=+44.631156731
I0407 03:23:56.061853       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 03:23:56.06184165 +0000 UTC m=+44.642020738
I0407 03:23:56.082080       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:56.082164       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:23:56.082187       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 03:23:56.082180995 +0000 UTC m=+44.662360083
I0407 03:23:56.525250       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pbftf" condition "Approved" to 2026-04-07 03:23:56.52524194 +0000 UTC m=+45.105421018
I0407 03:23:56.554976       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-pbftf" condition "Ready" to 2026-04-07 03:23:56.554965921 +0000 UTC m=+45.135145009
I0407 03:23:56.584349       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:23:56.584333134 +0000 UTC m=+45.164512242
I0407 03:23:56.610178       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:56.610518       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:23:56.610507892 +0000 UTC m=+45.190687000
I0407 03:23:56.629693       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:23:56.629936       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:23:56.629930187 +0000 UTC m=+45.210109255
I0407 03:28:02.805251       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-04-07 03:28:02.805214314 +0000 UTC m=+291.385393422
I0407 03:28:02.805308       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:28:02.805445       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-04-07 03:28:02.80541818 +0000 UTC m=+291.385597248
I0407 03:28:02.822372       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:28:02.822429       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-04-07 03:28:02.82242409 +0000 UTC m=+291.402603178
I0407 03:28:03.035019       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:28:03.065559       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-cb5b6" condition "Approved" to 2026-04-07 03:28:03.065547785 +0000 UTC m=+291.645726893
I0407 03:28:03.096267       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-cb5b6" condition "Ready" to 2026-04-07 03:28:03.096254209 +0000 UTC m=+291.676433317
I0407 03:28:03.133756       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:28:03.133743425 +0000 UTC m=+291.713922533
I0407 03:28:03.149400       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:06.271095       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:29:06.271090       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 03:29:06.270803098 +0000 UTC m=+354.850982206
I0407 03:29:06.271134       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 03:29:06.271122705 +0000 UTC m=+354.851301793
E0407 03:29:06.283497       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 03:29:06.283535       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 03:29:06.283527784 +0000 UTC m=+354.863706872
E0407 03:29:06.283627       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 03:29:06.284477       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:06.284538       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:29:06.284555       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 03:29:06.284550947 +0000 UTC m=+354.864730035
E0407 03:29:06.291323       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0407 03:29:06.292215       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 03:29:06.292282       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 03:29:06.292310       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0407 03:29:06.346087       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jkgk5" condition "Approved" to 2026-04-07 03:29:06.346073378 +0000 UTC m=+354.926252456
I0407 03:29:06.347688       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:06.385538       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jkgk5" condition "Ready" to 2026-04-07 03:29:06.385529374 +0000 UTC m=+354.965708442
I0407 03:29:06.422488       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:06.422472024 +0000 UTC m=+355.002651132
I0407 03:29:06.439837       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:06.477188       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:11.292575       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:11.292561152 +0000 UTC m=+359.872740260
I0407 03:29:51.155291       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:29:51.155327       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 03:29:51.155320824 +0000 UTC m=+399.735499892
I0407 03:29:51.155558       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 03:29:51.155543359 +0000 UTC m=+399.735722437
I0407 03:29:51.162761       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 03:29:51.162754866 +0000 UTC m=+399.742933944
I0407 03:29:51.163764       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:29:51.163781       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 03:29:51.163778065 +0000 UTC m=+399.743957143
I0407 03:29:51.171296       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:29:51.171313       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 03:29:51.171310329 +0000 UTC m=+399.751489407
I0407 03:29:51.171521       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 03:29:51.171517163 +0000 UTC m=+399.751696241
I0407 03:29:51.196272       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.196311       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 03:29:51.196305275 +0000 UTC m=+399.776484353
I0407 03:29:51.196630       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.196656       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 03:29:51.196653672 +0000 UTC m=+399.776832750
I0407 03:29:51.205637       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.205688       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:29:51.205707       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 03:29:51.205702144 +0000 UTC m=+399.785881222
I0407 03:29:51.385928       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.387084       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.396295       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-db56n" condition "Approved" to 2026-04-07 03:29:51.396279355 +0000 UTC m=+399.976458443
I0407 03:29:51.417905       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-db56n" condition "Ready" to 2026-04-07 03:29:51.417895187 +0000 UTC m=+399.998074255
I0407 03:29:51.438626       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kkhzn" condition "Approved" to 2026-04-07 03:29:51.438614902 +0000 UTC m=+400.018793990
I0407 03:29:51.455644       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:51.455630176 +0000 UTC m=+400.035809254
I0407 03:29:51.465313       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kkhzn" condition "Ready" to 2026-04-07 03:29:51.46530043 +0000 UTC m=+400.045479518
I0407 03:29:51.490303       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.490579       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:51.490573801 +0000 UTC m=+400.070752879
I0407 03:29:51.497348       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.528360       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.545740       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:51.545721022 +0000 UTC m=+400.125900130
I0407 03:29:51.695836       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:51.696115       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:51.696110206 +0000 UTC m=+400.276289284
I0407 03:29:51.992340       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:52.091139       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:52.143757       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:52.305092       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wjhll" condition "Approved" to 2026-04-07 03:29:52.305079409 +0000 UTC m=+400.885258477
I0407 03:29:52.431827       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wjhll" condition "Ready" to 2026-04-07 03:29:52.431816095 +0000 UTC m=+401.011995183
I0407 03:29:52.842455       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:52.842442422 +0000 UTC m=+401.422621490
I0407 03:29:52.943977       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:52.944433       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:52.944425728 +0000 UTC m=+401.524604806
I0407 03:29:53.153889       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:58.888696       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:29:58.888727       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls" condition "Issuing" to 2026-04-07 03:29:58.888719394 +0000 UTC m=+407.468898482
I0407 03:29:58.889577       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls" condition "Ready" to 2026-04-07 03:29:58.889570929 +0000 UTC m=+407.469750017
I0407 03:29:58.909294       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:58.909362       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls" condition "Ready" to 2026-04-07 03:29:58.909353718 +0000 UTC m=+407.489532816
I0407 03:29:59.371640       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:29:59.398131       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rj7wh-6ghbj" condition "Approved" to 2026-04-07 03:29:59.398116005 +0000 UTC m=+407.978295093
I0407 03:29:59.415745       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rj7wh-6ghbj" condition "Ready" to 2026-04-07 03:29:59.415732802 +0000 UTC m=+407.995911890
I0407 03:29:59.442080       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:29:59.442064701 +0000 UTC m=+408.022243789
I0407 03:29:59.460665       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rj7wh-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:30:10.217543       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:30:10.217588       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 03:30:10.217571057 +0000 UTC m=+418.797750145
I0407 03:30:10.217603       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 03:30:10.217593197 +0000 UTC m=+418.797772285
I0407 03:30:10.244485       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:30:10.244563       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 03:30:10.244553361 +0000 UTC m=+418.824732449
I0407 03:30:10.400682       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:30:10.424185       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jrkrd" condition "Approved" to 2026-04-07 03:30:10.424172732 +0000 UTC m=+419.004351820
I0407 03:30:10.446848       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jrkrd" condition "Ready" to 2026-04-07 03:30:10.446836819 +0000 UTC m=+419.027015907
I0407 03:30:10.479999       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:30:10.479987364 +0000 UTC m=+419.060166432
I0407 03:30:10.506175       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:33:24.853534       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:33:24.853610       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 03:33:24.853599835 +0000 UTC m=+613.433778953
I0407 03:33:24.853800       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 03:33:24.853783407 +0000 UTC m=+613.433962485
I0407 03:33:24.872829       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:33:24.872894       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 03:33:24.872887907 +0000 UTC m=+613.453066985
I0407 03:33:25.204834       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:33:25.231138       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-25d6n" condition "Approved" to 2026-04-07 03:33:25.231112888 +0000 UTC m=+613.811291976
I0407 03:33:25.247703       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-25d6n" condition "Ready" to 2026-04-07 03:33:25.247688755 +0000 UTC m=+613.827867843
I0407 03:33:25.278713       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:33:25.278696673 +0000 UTC m=+613.858875761
I0407 03:33:25.308522       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:33:25.308794       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:33:25.308788799 +0000 UTC m=+613.888967877
I0407 03:33:25.326362       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:34:08.120296       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-07 03:34:08.120282383 +0000 UTC m=+656.700461471
I0407 03:34:08.120652       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:34:08.120673       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 03:34:08.120669458 +0000 UTC m=+656.700848546
I0407 03:34:08.138682       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 03:34:08.138779       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 03:34:08.138829       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-07 03:34:08.138821597 +0000 UTC m=+656.719000685
I0407 03:34:08.367609       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-brqrb" condition "Approved" to 2026-04-07 03:34:08.36759828 +0000 UTC m=+656.947777368
I0407 03:34:08.385161       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-brqrb" condition "Ready" to 2026-04-07 03:34:08.385152282 +0000 UTC m=+656.965331360
I0407 03:34:08.420786       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 03:34:08.420769452 +0000 UTC m=+657.000948530
I0407 03:34:08.439336       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"