I0430 20:14:43.922308       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0430 20:14:43.922640       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0430 20:14:43.922739       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0430 20:14:43.927506       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0430 20:14:43.928160       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0430 20:14:43.928226       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0430 20:14:43.928422       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0430 20:14:43.931572       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0430 20:14:43.947308       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0430 20:14:43.952983       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0430 20:14:43.959067       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0430 20:14:43.961942       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0430 20:14:43.964636       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0430 20:14:43.967454       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0430 20:14:43.970068       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0430 20:14:43.972895       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0430 20:14:43.976438       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0430 20:14:43.980764       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0430 20:14:43.982473       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0430 20:14:43.984170       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0430 20:14:43.984298       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0430 20:14:43.986109       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0430 20:14:43.986162       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0430 20:14:43.987897       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0430 20:14:43.989424       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0430 20:14:43.989448       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0430 20:14:43.989630       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0430 20:14:43.991235       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0430 20:14:43.992803       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0430 20:14:43.998979       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0430 20:14:43.999022       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0430 20:14:43.999060       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0430 20:14:44.004020       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0430 20:14:44.007250       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.007266       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.007642       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.022548       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.041345       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.056650       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.090978       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.092336       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.107966       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:14:44.127103       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0430 20:15:00.793704       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-30 20:15:00.793683689 +0000 UTC m=+16.915996078
I0430 20:15:01.600349       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:15:01.600409       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-30 20:15:01.60039758 +0000 UTC m=+17.722709979
I0430 20:15:01.600613       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-30 20:15:01.600362278 +0000 UTC m=+17.722674647
E0430 20:15:01.621917       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0430 20:15:01.622010       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-30 20:15:01.62199701 +0000 UTC m=+17.744309409
E0430 20:15:01.622046       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0430 20:15:01.622767       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:15:01.622873       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-30 20:15:01.622858131 +0000 UTC m=+17.745170530
E0430 20:15:01.636681       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0430 20:15:01.636932       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0430 20:15:01.636964       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0430 20:15:01.636998       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0430 20:15:01.642845       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:15:01.643096       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-30 20:15:01.643081378 +0000 UTC m=+17.765393777
I0430 20:15:01.647546       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bbkzm" condition "Approved" to 2026-04-30 20:15:01.647538795 +0000 UTC m=+17.769851164
I0430 20:15:01.661600       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bbkzm" condition "Ready" to 2026-04-30 20:15:01.661580726 +0000 UTC m=+17.783893125
I0430 20:15:01.687800       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:15:01.68777953 +0000 UTC m=+17.810091899
I0430 20:15:01.706552       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:15:01.706891       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:15:01.706881686 +0000 UTC m=+17.829194055
I0430 20:15:01.725952       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:15:06.637903       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:15:06.637888568 +0000 UTC m=+22.760200967
I0430 20:15:29.399605       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-30 20:15:29.399578261 +0000 UTC m=+45.521890630
I0430 20:15:29.400095       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:15:29.400235       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-30 20:15:29.400225187 +0000 UTC m=+45.522537556
I0430 20:15:29.427559       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-30 20:15:29.427542669 +0000 UTC m=+45.549855028
I0430 20:15:29.444042       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:15:29.444175       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:15:29.444216       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-30 20:15:29.444206631 +0000 UTC m=+45.566519010
I0430 20:15:29.610481       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:15:29.620281       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t7z2d" condition "Approved" to 2026-04-30 20:15:29.620248482 +0000 UTC m=+45.742560861
I0430 20:15:29.652329       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t7z2d" condition "Ready" to 2026-04-30 20:15:29.652312735 +0000 UTC m=+45.774625104
I0430 20:15:29.683333       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:15:29.683312406 +0000 UTC m=+45.805624775
I0430 20:15:29.718215       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:19:36.344416       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:19:36.344522       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-04-30 20:19:36.344474343 +0000 UTC m=+292.466786742
I0430 20:19:36.345211       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-04-30 20:19:36.345201367 +0000 UTC m=+292.467513756
I0430 20:19:36.364999       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:19:36.365075       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-04-30 20:19:36.365063202 +0000 UTC m=+292.487375571
I0430 20:19:36.744308       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:19:36.782506       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-rthfp" condition "Approved" to 2026-04-30 20:19:36.782492664 +0000 UTC m=+292.904805023
I0430 20:19:36.813478       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-rthfp" condition "Ready" to 2026-04-30 20:19:36.813468563 +0000 UTC m=+292.935780922
I0430 20:19:36.840482       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:19:36.840464375 +0000 UTC m=+292.962776744
I0430 20:19:36.861228       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:19:36.861925       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:19:36.861912761 +0000 UTC m=+292.984225160
I0430 20:19:36.877868       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:19:36.878154       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:19:36.878142204 +0000 UTC m=+293.000454573
I0430 20:20:41.547511       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:20:41.547630       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-30 20:20:41.547578113 +0000 UTC m=+357.669890542
I0430 20:20:41.548056       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-30 20:20:41.547432229 +0000 UTC m=+357.669744628
E0430 20:20:41.560193       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0430 20:20:41.560265       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-30 20:20:41.560251549 +0000 UTC m=+357.682563948
E0430 20:20:41.560349       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0430 20:20:41.562234       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:20:41.562311       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:20:41.562339       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-30 20:20:41.562332357 +0000 UTC m=+357.684644726
E0430 20:20:41.572379       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0430 20:20:41.573127       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0430 20:20:41.573274       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0430 20:20:41.573385       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0430 20:20:41.601914       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2bxr9" condition "Approved" to 2026-04-30 20:20:41.601897166 +0000 UTC m=+357.724209565
I0430 20:20:41.615124       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2bxr9" condition "Ready" to 2026-04-30 20:20:41.615108133 +0000 UTC m=+357.737420502
I0430 20:20:41.636634       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:20:41.636623458 +0000 UTC m=+357.758935817
I0430 20:20:41.651625       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:20:41.652244       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:20:41.652232618 +0000 UTC m=+357.774544987
I0430 20:20:41.663098       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:20:41.670752       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:20:46.574265       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:20:46.574242033 +0000 UTC m=+362.696554422
I0430 20:21:29.896173       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:21:29.896223       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-30 20:21:29.896216263 +0000 UTC m=+406.018528622
I0430 20:21:29.896003       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-30 20:21:29.895969408 +0000 UTC m=+406.018281767
I0430 20:21:29.912780       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-30 20:21:29.912760488 +0000 UTC m=+406.035072857
I0430 20:21:29.913480       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:21:29.913529       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-30 20:21:29.913519141 +0000 UTC m=+406.035831510
I0430 20:21:29.917940       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-30 20:21:29.917926897 +0000 UTC m=+406.040239266
I0430 20:21:29.921767       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:21:29.921824       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-30 20:21:29.921816895 +0000 UTC m=+406.044129254
I0430 20:21:29.951702       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:29.951873       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-30 20:21:29.951862063 +0000 UTC m=+406.074174422
I0430 20:21:29.971722       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:29.971811       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-30 20:21:29.971802928 +0000 UTC m=+406.094115307
I0430 20:21:29.978349       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:29.978429       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-30 20:21:29.978421902 +0000 UTC m=+406.100734261
I0430 20:21:30.133669       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:30.166273       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g9qlf" condition "Approved" to 2026-04-30 20:21:30.166250782 +0000 UTC m=+406.288563141
I0430 20:21:30.193680       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g9qlf" condition "Ready" to 2026-04-30 20:21:30.193667905 +0000 UTC m=+406.315980274
I0430 20:21:30.194118       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:30.224401       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:30.252541       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5zx6h" condition "Approved" to 2026-04-30 20:21:30.25253047 +0000 UTC m=+406.374842829
I0430 20:21:30.264240       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:21:30.264209901 +0000 UTC m=+406.386522270
I0430 20:21:30.285145       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5zx6h" condition "Ready" to 2026-04-30 20:21:30.285136182 +0000 UTC m=+406.407448531
I0430 20:21:30.290188       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4mk4j" condition "Approved" to 2026-04-30 20:21:30.290172669 +0000 UTC m=+406.412485028
I0430 20:21:30.298952       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:30.346207       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4mk4j" condition "Ready" to 2026-04-30 20:21:30.346191205 +0000 UTC m=+406.468503574
I0430 20:21:30.639452       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:21:30.639436484 +0000 UTC m=+406.761748853
I0430 20:21:30.937444       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:30.989207       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:21:30.989191587 +0000 UTC m=+407.111503946
I0430 20:21:31.240222       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:31.244907       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:21:31.242839849 +0000 UTC m=+407.365152198
I0430 20:21:31.590000       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:31.686412       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:31.793252       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:31.938055       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:37.808772       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:21:37.808813       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls" condition "Issuing" to 2026-04-30 20:21:37.808802644 +0000 UTC m=+413.931115013
I0430 20:21:37.809624       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls" condition "Ready" to 2026-04-30 20:21:37.809601308 +0000 UTC m=+413.931913677
I0430 20:21:37.825247       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:37.825331       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls" condition "Ready" to 2026-04-30 20:21:37.825321728 +0000 UTC m=+413.947634087
I0430 20:21:38.004433       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:38.037602       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ldw6w-rx7d5" condition "Approved" to 2026-04-30 20:21:38.037573493 +0000 UTC m=+414.159885872
I0430 20:21:38.060753       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ldw6w-rx7d5" condition "Ready" to 2026-04-30 20:21:38.060742439 +0000 UTC m=+414.183054798
I0430 20:21:38.089096       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:21:38.089083046 +0000 UTC m=+414.211395415
I0430 20:21:38.115809       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ldw6w-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:50.434034       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:21:50.434071       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-30 20:21:50.434064279 +0000 UTC m=+426.556376638
I0430 20:21:50.434062       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-30 20:21:50.433993828 +0000 UTC m=+426.556306187
I0430 20:21:50.448431       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:50.448524       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-30 20:21:50.448515415 +0000 UTC m=+426.570827784
I0430 20:21:50.602290       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:21:50.651316       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bl8t9" condition "Approved" to 2026-04-30 20:21:50.65130155 +0000 UTC m=+426.773613919
I0430 20:21:50.678398       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bl8t9" condition "Ready" to 2026-04-30 20:21:50.678103237 +0000 UTC m=+426.800415606
I0430 20:21:50.714861       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:21:50.714752741 +0000 UTC m=+426.837065110
I0430 20:21:50.740025       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:03.704142       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-30 20:25:03.704118987 +0000 UTC m=+619.826431356
I0430 20:25:03.704453       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:25:03.704556       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-30 20:25:03.70453889 +0000 UTC m=+619.826851289
I0430 20:25:03.725091       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:03.725199       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-30 20:25:03.725189399 +0000 UTC m=+619.847501768
I0430 20:25:03.914247       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:03.943961       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dlmvn" condition "Approved" to 2026-04-30 20:25:03.943943754 +0000 UTC m=+620.066256123
I0430 20:25:03.961214       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dlmvn" condition "Ready" to 2026-04-30 20:25:03.961201864 +0000 UTC m=+620.083514223
I0430 20:25:03.990154       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:25:03.990131809 +0000 UTC m=+620.112444178
I0430 20:25:04.011948       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:04.012374       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:25:04.012366019 +0000 UTC m=+620.134678398
I0430 20:25:04.030588       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:04.031003       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:25:04.030994642 +0000 UTC m=+620.153307001
I0430 20:25:46.964161       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0430 20:25:46.964194       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-30 20:25:46.964187028 +0000 UTC m=+663.086499387
I0430 20:25:46.964700       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-30 20:25:46.964676603 +0000 UTC m=+663.086988962
I0430 20:25:46.990292       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:46.990432       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-30 20:25:46.990424271 +0000 UTC m=+663.112736630
I0430 20:25:47.089457       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:47.123094       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fjxqz" condition "Approved" to 2026-04-30 20:25:47.123081698 +0000 UTC m=+663.245394057
I0430 20:25:47.140993       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-fjxqz" condition "Ready" to 2026-04-30 20:25:47.140987112 +0000 UTC m=+663.263299471
I0430 20:25:47.177306       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:25:47.177294244 +0000 UTC m=+663.299606613
I0430 20:25:47.202538       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:47.202926       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-30 20:25:47.202916398 +0000 UTC m=+663.325228767
I0430 20:25:47.221251       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0430 20:25:47.229152       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"