I0505 15:27:43.376066       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0505 15:27:43.376192       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0505 15:27:43.376281       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0505 15:27:43.380620       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0505 15:27:43.380950       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0505 15:27:43.381078       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0505 15:27:43.381138       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0505 15:27:43.383438       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0505 15:27:43.397755       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0505 15:27:43.400962       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0505 15:27:43.401014       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0505 15:27:43.407312       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0505 15:27:43.409957       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0505 15:27:43.413215       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0505 15:27:43.415818       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0505 15:27:43.418250       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0505 15:27:43.420537       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0505 15:27:43.420587       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0505 15:27:43.425255       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0505 15:27:43.429760       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0505 15:27:43.432782       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0505 15:27:43.434479       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0505 15:27:43.434703       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0505 15:27:43.436379       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0505 15:27:43.438217       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0505 15:27:43.439927       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0505 15:27:43.441765       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0505 15:27:43.443700       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0505 15:27:43.448227       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0505 15:27:43.448251       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0505 15:27:43.448418       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0505 15:27:43.449973       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0505 15:27:43.450030       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0505 15:27:43.453377       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.453389       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.454141       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.455119       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.476604       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.498548       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.510914       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.531458       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.547168       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:43.551306       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0505 15:27:54.879318       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 15:27:54.879302342 +0000 UTC m=+11.532680175
I0505 15:27:55.591918       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 15:27:55.591901084 +0000 UTC m=+12.245278917
I0505 15:27:55.592149       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:27:55.592224       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 15:27:55.592216886 +0000 UTC m=+12.245594689
E0505 15:27:55.609162       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0505 15:27:55.609260       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 15:27:55.609250071 +0000 UTC m=+12.262627914
E0505 15:27:55.609314       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0505 15:27:55.612127       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:27:55.612184       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:27:55.612201       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 15:27:55.612195565 +0000 UTC m=+12.265573378
E0505 15:27:55.624842       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0505 15:27:55.625467       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0505 15:27:55.625511       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0505 15:27:55.625542       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0505 15:27:55.651839       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n6qdc" condition "Approved" to 2026-05-05 15:27:55.651822027 +0000 UTC m=+12.305199840
I0505 15:27:55.664348       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-n6qdc" condition "Ready" to 2026-05-05 15:27:55.664337455 +0000 UTC m=+12.317715258
I0505 15:27:55.693587       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:27:55.693574826 +0000 UTC m=+12.346952649
I0505 15:27:55.708899       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:27:55.747566       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:28:00.625566       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:28:00.625552179 +0000 UTC m=+17.278929992
I0505 15:28:22.877318       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 15:28:22.877302867 +0000 UTC m=+39.530680680
I0505 15:28:22.877741       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:28:22.877793       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 15:28:22.877783271 +0000 UTC m=+39.531161084
I0505 15:28:22.889360       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 15:28:22.889348029 +0000 UTC m=+39.542725832
I0505 15:28:22.909436       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:28:22.909492       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:28:22.909599       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 15:28:22.909591823 +0000 UTC m=+39.562969636
I0505 15:28:23.219959       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:28:23.224352       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dnqpk" condition "Approved" to 2026-05-05 15:28:23.224337714 +0000 UTC m=+39.877715527
I0505 15:28:23.258945       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dnqpk" condition "Ready" to 2026-05-05 15:28:23.258930508 +0000 UTC m=+39.912308321
I0505 15:28:23.290403       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:28:23.290384778 +0000 UTC m=+39.943762611
I0505 15:28:23.314384       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:28:23.363072       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:32:25.762387       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-05-05 15:32:25.762372277 +0000 UTC m=+282.415750090
I0505 15:32:25.762753       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:32:25.762794       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-05-05 15:32:25.762789943 +0000 UTC m=+282.416167756
I0505 15:32:25.781977       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:32:25.782028       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:32:25.782041       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-05-05 15:32:25.782035791 +0000 UTC m=+282.435413604
I0505 15:32:25.942231       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:32:25.950410       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-828fj" condition "Approved" to 2026-05-05 15:32:25.950403996 +0000 UTC m=+282.603781799
I0505 15:32:25.973612       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-828fj" condition "Ready" to 2026-05-05 15:32:25.973602838 +0000 UTC m=+282.626980641
I0505 15:32:26.001040       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:32:26.001028446 +0000 UTC m=+282.654406259
I0505 15:32:26.018239       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:32:26.018620       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:32:26.018612952 +0000 UTC m=+282.671990775
I0505 15:32:26.024965       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:32:26.037076       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:32:26.037826       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:32:26.037813621 +0000 UTC m=+282.691191454
I0505 15:32:26.038380       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:33:30.139299       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 15:33:30.139249367 +0000 UTC m=+346.792627210
I0505 15:33:30.139793       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:33:30.139817       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 15:33:30.139811645 +0000 UTC m=+346.793189488
E0505 15:33:30.174776       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0505 15:33:30.174822       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 15:33:30.174813206 +0000 UTC m=+346.828191039
E0505 15:33:30.174881       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0505 15:33:30.179176       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:33:30.179288       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:33:30.179323       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 15:33:30.179314856 +0000 UTC m=+346.832692669
E0505 15:33:30.190370       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0505 15:33:30.190446       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0505 15:33:30.190475       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0505 15:33:30.190510       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0505 15:33:30.230930       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5l79q" condition "Approved" to 2026-05-05 15:33:30.230919652 +0000 UTC m=+346.884297465
I0505 15:33:30.249284       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5l79q" condition "Ready" to 2026-05-05 15:33:30.249269095 +0000 UTC m=+346.902646938
I0505 15:33:30.272749       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:33:30.27273649 +0000 UTC m=+346.926114303
I0505 15:33:30.293473       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:33:30.293683       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:33:30.29367601 +0000 UTC m=+346.947053823
I0505 15:33:30.311333       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:33:30.311570       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:33:30.311560398 +0000 UTC m=+346.964938211
I0505 15:33:35.191079       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:33:35.191065859 +0000 UTC m=+351.844443702
I0505 15:34:13.627769       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 15:34:13.627758488 +0000 UTC m=+390.281136291
I0505 15:34:13.629073       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:34:13.646780       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 15:34:13.646765488 +0000 UTC m=+390.300143311
I0505 15:34:13.646299       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:34:13.649982       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 15:34:13.649970049 +0000 UTC m=+390.303347852
I0505 15:34:13.646421       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 15:34:13.646415407 +0000 UTC m=+390.299793200
I0505 15:34:13.659603       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:34:13.659630       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 15:34:13.659624102 +0000 UTC m=+390.313001905
I0505 15:34:13.659879       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 15:34:13.659866459 +0000 UTC m=+390.313244252
I0505 15:34:13.683820       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:13.684373       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:34:13.693337       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 15:34:13.693322958 +0000 UTC m=+390.346701131
I0505 15:34:13.694189       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:13.694363       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 15:34:13.694354918 +0000 UTC m=+390.347732761
I0505 15:34:13.694836       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:13.694991       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 15:34:13.694983876 +0000 UTC m=+390.348361719
I0505 15:34:13.864760       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:13.896420       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sx9pq" condition "Approved" to 2026-05-05 15:34:13.89640199 +0000 UTC m=+390.549779803
I0505 15:34:13.903416       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zm5dt" condition "Approved" to 2026-05-05 15:34:13.903401248 +0000 UTC m=+390.556779061
I0505 15:34:13.906594       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:13.932902       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sx9pq" condition "Ready" to 2026-05-05 15:34:13.932890465 +0000 UTC m=+390.586268268
I0505 15:34:13.936304       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zm5dt" condition "Ready" to 2026-05-05 15:34:13.936299401 +0000 UTC m=+390.589677204
I0505 15:34:13.954570       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bxcg7" condition "Approved" to 2026-05-05 15:34:13.954559639 +0000 UTC m=+390.607937442
I0505 15:34:13.983066       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:34:13.983058578 +0000 UTC m=+390.636436381
I0505 15:34:14.171325       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bxcg7" condition "Ready" to 2026-05-05 15:34:14.171313962 +0000 UTC m=+390.824691775
I0505 15:34:14.264561       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:34:14.264551758 +0000 UTC m=+390.917929571
I0505 15:34:14.385580       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:14.614191       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:14.614857       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:34:14.614847231 +0000 UTC m=+391.268225064
I0505 15:34:14.742583       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:34:14.742574293 +0000 UTC m=+391.395952086
I0505 15:34:14.920476       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:34:14.920462621 +0000 UTC m=+391.573840434
I0505 15:34:15.063145       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:15.063452       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:34:15.063445647 +0000 UTC m=+391.716823460
I0505 15:34:15.115498       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:15.164320       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:15.215594       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:15.613516       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:22.746870       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvv99-tls" condition "Ready" to 2026-05-05 15:34:22.746833222 +0000 UTC m=+399.400211035
I0505 15:34:22.748256       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvv99-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:34:22.749011       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvv99-tls" condition "Issuing" to 2026-05-05 15:34:22.749000412 +0000 UTC m=+399.402378235
I0505 15:34:22.764380       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvv99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvv99-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:22.764496       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvv99-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:34:22.764528       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvv99-tls" condition "Issuing" to 2026-05-05 15:34:22.764522539 +0000 UTC m=+399.417900352
I0505 15:34:22.895200       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dvv99-f48x6" condition "Approved" to 2026-05-05 15:34:22.895005039 +0000 UTC m=+399.548382872
I0505 15:34:22.915877       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dvv99-f48x6" condition "Ready" to 2026-05-05 15:34:22.915865542 +0000 UTC m=+399.569243355
I0505 15:34:22.939676       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvv99-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:34:22.939663317 +0000 UTC m=+399.593041120
I0505 15:34:22.961790       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvv99-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvv99-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:35.122203       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 15:34:35.12217825 +0000 UTC m=+411.775556063
I0505 15:34:35.122334       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:34:35.122364       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 15:34:35.122360345 +0000 UTC m=+411.775738148
I0505 15:34:35.137727       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:35.137798       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 15:34:35.137778581 +0000 UTC m=+411.791156394
I0505 15:34:35.704909       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:34:35.751734       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c6j7v" condition "Approved" to 2026-05-05 15:34:35.751716069 +0000 UTC m=+412.405093882
I0505 15:34:35.781743       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c6j7v" condition "Ready" to 2026-05-05 15:34:35.78173134 +0000 UTC m=+412.435109153
I0505 15:34:35.830867       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:34:35.830855566 +0000 UTC m=+412.484233369
I0505 15:34:35.878596       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:37:43.260915       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 15:37:43.260899083 +0000 UTC m=+599.914276916
I0505 15:37:43.261061       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:37:43.261099       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 15:37:43.261095667 +0000 UTC m=+599.914473460
I0505 15:37:43.279059       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:37:43.279888       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:37:43.279919       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 15:37:43.279912589 +0000 UTC m=+599.933290402
I0505 15:37:43.433882       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gdzxh" condition "Approved" to 2026-05-05 15:37:43.433872016 +0000 UTC m=+600.087249829
I0505 15:37:43.453331       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gdzxh" condition "Ready" to 2026-05-05 15:37:43.453321669 +0000 UTC m=+600.106699482
I0505 15:37:43.485193       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:37:43.485182608 +0000 UTC m=+600.138560411
I0505 15:37:43.508222       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:38:25.417964       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:38:25.417999       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 15:38:25.417992503 +0000 UTC m=+642.071370306
I0505 15:38:25.418055       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-05 15:38:25.418040254 +0000 UTC m=+642.071418067
I0505 15:38:25.432631       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:38:25.432893       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0505 15:38:25.432941       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-05 15:38:25.432933764 +0000 UTC m=+642.086311577
I0505 15:38:25.575802       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c8zbz" condition "Approved" to 2026-05-05 15:38:25.575788362 +0000 UTC m=+642.229166185
I0505 15:38:25.597560       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-c8zbz" condition "Ready" to 2026-05-05 15:38:25.597549303 +0000 UTC m=+642.250927106
I0505 15:38:25.632797       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 15:38:25.632783759 +0000 UTC m=+642.286161562
I0505 15:38:25.664064       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0505 15:38:25.718939       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"