I0416 16:16:10.873752       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0416 16:16:10.874031       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0416 16:16:10.874233       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0416 16:16:10.880374       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0416 16:16:10.880870       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0416 16:16:10.880942       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0416 16:16:10.880998       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0416 16:16:10.883147       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0416 16:16:10.897059       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0416 16:16:10.901891       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0416 16:16:10.908599       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0416 16:16:10.908710       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0416 16:16:10.911548       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0416 16:16:10.914017       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0416 16:16:10.916419       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0416 16:16:10.918184       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0416 16:16:10.920264       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0416 16:16:10.921999       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0416 16:16:10.927460       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0416 16:16:10.927495       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0416 16:16:10.927510       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0416 16:16:10.927646       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0416 16:16:10.930484       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0416 16:16:10.933212       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0416 16:16:10.935792       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0416 16:16:10.937366       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0416 16:16:10.937538       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0416 16:16:10.939537       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0416 16:16:10.941456       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0416 16:16:10.943305       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0416 16:16:10.945389       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0416 16:16:10.945472       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0416 16:16:10.949638       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0416 16:16:10.952430       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:10.953004       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:10.953195       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:10.975168       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:10.990770       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:11.004110       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:11.016645       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:11.031356       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:11.046923       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:11.048770       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0416 16:16:28.013254       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 16:16:28.013241546 +0000 UTC m=+17.172400822
I0416 16:16:28.728085       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:16:28.728073509 +0000 UTC m=+17.887232785
I0416 16:16:28.728618       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:16:28.728651       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 16:16:28.728644675 +0000 UTC m=+17.887804181
E0416 16:16:28.876572       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0416 16:16:28.876657       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 16:16:28.876647661 +0000 UTC m=+18.035806957
E0416 16:16:28.876689       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0416 16:16:28.880812       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:16:28.880891       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:16:28.880883818 +0000 UTC m=+18.040043094
E0416 16:16:29.595522       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0416 16:16:29.595645       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0416 16:16:29.595682       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0416 16:16:29.595722       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0416 16:16:29.924392       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:16:30.156871       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-256sm" condition "Approved" to 2026-04-16 16:16:30.156856932 +0000 UTC m=+19.316016238
I0416 16:16:30.244109       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-256sm" condition "Ready" to 2026-04-16 16:16:30.244095965 +0000 UTC m=+19.403255241
I0416 16:16:30.954395       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:16:30.954379484 +0000 UTC m=+20.113538790
I0416 16:16:31.078658       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:16:31.146190       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:16:34.596941       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:16:34.596927339 +0000 UTC m=+23.756086635
I0416 16:17:00.923029       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:17:00.922995344 +0000 UTC m=+50.082154620
I0416 16:17:00.923655       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:17:00.923680       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:17:00.923675403 +0000 UTC m=+50.082834669
I0416 16:17:00.937693       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 16:17:00.937675439 +0000 UTC m=+50.096834725
I0416 16:17:00.946873       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:17:00.947006       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:17:00.947110       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:17:00.947029557 +0000 UTC m=+50.106188823
I0416 16:17:01.079616       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:17:01.087692       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wlwqq" condition "Approved" to 2026-04-16 16:17:01.08768227 +0000 UTC m=+50.246841536
I0416 16:17:01.120898       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wlwqq" condition "Ready" to 2026-04-16 16:17:01.120880965 +0000 UTC m=+50.280040271
I0416 16:17:01.165191       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:17:01.165175048 +0000 UTC m=+50.324334324
I0416 16:17:01.190724       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:17:01.191230       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:17:01.191213657 +0000 UTC m=+50.350372933
I0416 16:17:01.222767       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:21:54.506450       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:21:54.506513       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Issuing" to 2026-04-16 16:21:54.506506723 +0000 UTC m=+343.665665999
I0416 16:21:54.506670       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-04-16 16:21:54.506659997 +0000 UTC m=+343.665819273
I0416 16:21:54.522710       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:21:54.522789       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-04-16 16:21:54.52278116 +0000 UTC m=+343.681940436
I0416 16:21:54.727108       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:21:54.750913       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-2dsqw" condition "Approved" to 2026-04-16 16:21:54.750901084 +0000 UTC m=+343.910060360
I0416 16:21:54.779277       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-2dsqw" condition "Ready" to 2026-04-16 16:21:54.779262879 +0000 UTC m=+343.938422175
I0416 16:21:54.806967       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:21:54.806958927 +0000 UTC m=+343.966118193
I0416 16:21:54.828834       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:21:54.829377       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:21:54.8293644 +0000 UTC m=+343.988523706
I0416 16:21:54.832436       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:21:54.846524       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:00.164467       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:23:00.16444339 +0000 UTC m=+409.323602726
I0416 16:23:00.164662       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:23:00.164714       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 16:23:00.164702876 +0000 UTC m=+409.323862182
E0416 16:23:00.177716       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0416 16:23:00.177754       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 16:23:00.177746609 +0000 UTC m=+409.336905885
E0416 16:23:00.177812       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0416 16:23:00.180796       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:00.180893       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:23:00.180937       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 16:23:00.180910777 +0000 UTC m=+409.340070053
E0416 16:23:00.193769       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0416 16:23:00.193825       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0416 16:23:00.194004       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0416 16:23:00.194039       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0416 16:23:00.217309       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k6sk7" condition "Approved" to 2026-04-16 16:23:00.217297328 +0000 UTC m=+409.376456604
I0416 16:23:00.227696       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k6sk7" condition "Ready" to 2026-04-16 16:23:00.227682616 +0000 UTC m=+409.386841892
I0416 16:23:00.245362       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:00.245347863 +0000 UTC m=+409.404507129
I0416 16:23:00.263441       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:00.264050       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:00.264036676 +0000 UTC m=+409.423195942
I0416 16:23:00.274089       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:00.276182       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:00.276482       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:00.276475075 +0000 UTC m=+409.435634341
I0416 16:23:00.277473       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:05.194802       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:05.194787694 +0000 UTC m=+414.353946990
I0416 16:23:45.618246       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 16:23:45.61823159 +0000 UTC m=+454.777390866
I0416 16:23:45.618786       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:23:45.618820       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:23:45.618813934 +0000 UTC m=+454.777973220
I0416 16:23:45.619170       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:23:45.619165153 +0000 UTC m=+454.778324419
I0416 16:23:45.619348       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:23:45.619367       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 16:23:45.619363758 +0000 UTC m=+454.778523024
I0416 16:23:45.636010       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:23:45.635995097 +0000 UTC m=+454.795154373
I0416 16:23:45.636180       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:23:45.636209       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:23:45.636203102 +0000 UTC m=+454.795362368
I0416 16:23:45.660504       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:45.660584       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:23:45.660577867 +0000 UTC m=+454.819737133
I0416 16:23:45.662699       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:45.665410       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:23:45.665444       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:23:45.66543876 +0000 UTC m=+454.824598026
I0416 16:23:45.675043       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:45.675106       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 16:23:45.675100383 +0000 UTC m=+454.834259649
I0416 16:23:45.854228       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:45.883908       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:45.900877       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-899sf" condition "Approved" to 2026-04-16 16:23:45.900863343 +0000 UTC m=+455.060022619
I0416 16:23:45.960945       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vts54" condition "Approved" to 2026-04-16 16:23:45.960938097 +0000 UTC m=+455.120097363
I0416 16:23:45.984677       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-899sf" condition "Ready" to 2026-04-16 16:23:45.984667176 +0000 UTC m=+455.143826442
I0416 16:23:45.985717       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vts54" condition "Ready" to 2026-04-16 16:23:45.985713872 +0000 UTC m=+455.144873138
I0416 16:23:46.093716       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:46.093707035 +0000 UTC m=+455.252866301
I0416 16:23:46.107672       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dtcft" condition "Approved" to 2026-04-16 16:23:46.107662506 +0000 UTC m=+455.266821772
I0416 16:23:46.141349       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:46.141338386 +0000 UTC m=+455.300497652
I0416 16:23:46.143240       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:46.147653       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dtcft" condition "Ready" to 2026-04-16 16:23:46.147641654 +0000 UTC m=+455.306800920
I0416 16:23:46.348305       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:46.348690       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:46.348683753 +0000 UTC m=+455.507843029
I0416 16:23:46.795860       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:46.795849117 +0000 UTC m=+455.955008393
I0416 16:23:46.808134       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:46.808118036 +0000 UTC m=+455.967277312
I0416 16:23:46.940178       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:47.020666       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:47.103308       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:47.104087       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:47.104076148 +0000 UTC m=+456.263235454
I0416 16:23:47.403629       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:47.538940       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:56.321671       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls" condition "Ready" to 2026-04-16 16:23:56.321652375 +0000 UTC m=+465.480811651
I0416 16:23:56.322199       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:23:56.322299       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls" condition "Issuing" to 2026-04-16 16:23:56.32223516 +0000 UTC m=+465.481394426
I0416 16:23:56.337745       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:23:56.338127       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:23:56.338171       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls" condition "Issuing" to 2026-04-16 16:23:56.338159173 +0000 UTC m=+465.497318479
I0416 16:23:56.716797       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gfgrr-s2gjt" condition "Approved" to 2026-04-16 16:23:56.716785588 +0000 UTC m=+465.875944864
I0416 16:23:56.749437       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gfgrr-s2gjt" condition "Ready" to 2026-04-16 16:23:56.749425333 +0000 UTC m=+465.908584609
I0416 16:23:56.779432       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:23:56.779412591 +0000 UTC m=+465.938571857
I0416 16:23:56.797016       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gfgrr-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:24:18.819197       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 16:24:18.819181433 +0000 UTC m=+487.978340699
I0416 16:24:18.819302       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:24:18.819333       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:24:18.819327376 +0000 UTC m=+487.978486652
I0416 16:24:18.835313       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:24:18.835396       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:24:18.835438       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:24:18.835431515 +0000 UTC m=+487.994590791
I0416 16:24:19.155274       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:24:19.160247       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mpcbt" condition "Approved" to 2026-04-16 16:24:19.160231448 +0000 UTC m=+488.319390724
I0416 16:24:19.181264       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mpcbt" condition "Ready" to 2026-04-16 16:24:19.181255034 +0000 UTC m=+488.340414300
I0416 16:24:19.207629       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:24:19.207618374 +0000 UTC m=+488.366777630
I0416 16:24:19.222845       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:24:19.272224       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:27:35.757624       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:27:35.757602337 +0000 UTC m=+684.916761643
I0416 16:27:35.757818       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:27:35.758393       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:27:35.758379547 +0000 UTC m=+684.917538833
I0416 16:27:35.774804       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:27:35.774914       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:27:35.774938       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:27:35.774930567 +0000 UTC m=+684.934089843
I0416 16:27:36.012946       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h8wf6" condition "Approved" to 2026-04-16 16:27:36.012930734 +0000 UTC m=+685.172090000
I0416 16:27:36.041474       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h8wf6" condition "Ready" to 2026-04-16 16:27:36.041461828 +0000 UTC m=+685.200621084
I0416 16:27:36.077193       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:27:36.077169205 +0000 UTC m=+685.236328481
I0416 16:27:36.113057       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:27:36.172349       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:28:24.035467       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 16:28:24.035444716 +0000 UTC m=+733.194603992
I0416 16:28:24.035612       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0416 16:28:24.036540       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 16:28:24.036528184 +0000 UTC m=+733.195687490
I0416 16:28:24.056530       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:28:24.056601       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 16:28:24.056596905 +0000 UTC m=+733.215756171
I0416 16:28:24.202632       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:28:24.244921       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2bcn2" condition "Approved" to 2026-04-16 16:28:24.244903388 +0000 UTC m=+733.404062694
I0416 16:28:24.264622       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2bcn2" condition "Ready" to 2026-04-16 16:28:24.26461283 +0000 UTC m=+733.423772096
I0416 16:28:24.296884       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:24.296866992 +0000 UTC m=+733.456026258
I0416 16:28:24.316162       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:28:24.316712       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:28:24.316702418 +0000 UTC m=+733.475861694
I0416 16:28:24.329221       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0416 16:28:24.350839       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"