I0528 21:42:40.897333       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0528 21:42:40.897504       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0528 21:42:40.897689       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0528 21:42:40.902700       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0528 21:42:40.903131       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0528 21:42:40.903245       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0528 21:42:40.903254       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0528 21:42:40.905919       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0528 21:42:40.924071       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0528 21:42:40.928529       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0528 21:42:40.931568       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0528 21:42:40.936446       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0528 21:42:40.939271       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0528 21:42:40.941943       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0528 21:42:40.944681       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0528 21:42:40.947486       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0528 21:42:40.950259       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0528 21:42:40.952532       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0528 21:42:40.958934       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0528 21:42:40.958971       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0528 21:42:40.959084       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0528 21:42:40.962035       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0528 21:42:40.964641       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0528 21:42:40.968507       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0528 21:42:40.971571       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0528 21:42:40.971641       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0528 21:42:40.971652       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0528 21:42:40.971655       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0528 21:42:40.974244       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0528 21:42:40.976246       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0528 21:42:40.978094       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0528 21:42:40.978266       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0528 21:42:40.982740       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0528 21:42:40.987972       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:40.988207       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:40.988269       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:40.991230       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:41.006988       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:41.026637       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:41.038855       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:41.053463       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:41.070266       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:41.077702       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0528 21:42:53.549302       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-28 21:42:53.549273155 +0000 UTC m=+12.690634942
I0528 21:42:54.255828       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-28 21:42:54.255814435 +0000 UTC m=+13.397176202
I0528 21:42:54.256331       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:42:54.256406       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 21:42:54.256395476 +0000 UTC m=+13.397757273
E0528 21:42:54.292825       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0528 21:42:54.292939       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-28 21:42:54.292924776 +0000 UTC m=+13.434286573
E0528 21:42:54.292985       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0528 21:42:54.297533       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:42:54.297688       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:42:54.297722       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 21:42:54.297711777 +0000 UTC m=+13.439073574
E0528 21:42:54.306229       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0528 21:42:54.306493       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 21:42:54.306520       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 21:42:54.306544       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0528 21:42:54.457251       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bjfh8" condition "Approved" to 2026-05-28 21:42:54.457241181 +0000 UTC m=+13.598602948
I0528 21:42:54.489375       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bjfh8" condition "Ready" to 2026-05-28 21:42:54.489357233 +0000 UTC m=+13.630719030
I0528 21:42:54.573104       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:42:54.573089544 +0000 UTC m=+13.714451331
I0528 21:42:54.611454       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:42:54.612007       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:42:54.611995704 +0000 UTC m=+13.753357501
I0528 21:42:54.648394       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:42:54.656170       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:42:59.306703       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:42:59.306689594 +0000 UTC m=+18.448051391
I0528 21:43:40.192148       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:43:40.192184       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-28 21:43:40.192176254 +0000 UTC m=+59.333538011
I0528 21:43:40.192640       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 21:43:40.19263558 +0000 UTC m=+59.333997337
I0528 21:43:40.261687       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:43:40.261922       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 21:43:40.26191026 +0000 UTC m=+59.403272057
I0528 21:43:40.263717       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-28 21:43:40.263706153 +0000 UTC m=+59.405067910
I0528 21:43:40.464465       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:43:40.636959       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4r5js" condition "Approved" to 2026-05-28 21:43:40.636916139 +0000 UTC m=+59.778277946
I0528 21:43:40.672427       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4r5js" condition "Ready" to 2026-05-28 21:43:40.672418889 +0000 UTC m=+59.813780646
I0528 21:43:40.935539       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:43:40.935525406 +0000 UTC m=+60.076887173
I0528 21:43:41.000853       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:43:41.129114       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:49:45.744299       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Ready" to 2026-05-28 21:49:45.744254003 +0000 UTC m=+424.885615770
I0528 21:49:45.744612       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-66.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:49:45.744648       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Issuing" to 2026-05-28 21:49:45.744640775 +0000 UTC m=+424.886002542
I0528 21:49:46.118477       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:49:46.118621       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-66.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:49:46.118672       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Issuing" to 2026-05-28 21:49:46.118664929 +0000 UTC m=+425.260026716
I0528 21:49:46.711399       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:49:46.718237       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-66.nip.io-tls-48nbh" condition "Approved" to 2026-05-28 21:49:46.718227703 +0000 UTC m=+425.859589470
I0528 21:49:46.902512       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-66.nip.io-tls-48nbh" condition "Ready" to 2026-05-28 21:49:46.902501612 +0000 UTC m=+426.043863379
I0528 21:49:47.070700       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:49:47.070689353 +0000 UTC m=+426.212051120
I0528 21:49:47.137754       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:49:47.141316       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:49:47.141306014 +0000 UTC m=+426.282667791
I0528 21:49:47.179946       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-66.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-66.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:49:47.180183       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-66.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:49:47.180177671 +0000 UTC m=+426.321539428
I0528 21:50:56.850802       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-28 21:50:56.850748421 +0000 UTC m=+495.992110208
I0528 21:50:56.851001       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:50:56.851091       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-28 21:50:56.851080011 +0000 UTC m=+495.992441808
E0528 21:50:56.866308       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0528 21:50:56.866455       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-28 21:50:56.866448705 +0000 UTC m=+496.007810462
E0528 21:50:56.866572       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0528 21:50:56.867420       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:50:56.867521       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:50:56.867603       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-28 21:50:56.86757811 +0000 UTC m=+496.008939867
E0528 21:50:56.879321       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0528 21:50:56.879492       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 21:50:56.879556       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0528 21:50:56.879634       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0528 21:50:56.916407       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2s92j" condition "Approved" to 2026-05-28 21:50:56.916396096 +0000 UTC m=+496.057757863
I0528 21:50:56.929776       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2s92j" condition "Ready" to 2026-05-28 21:50:56.929754078 +0000 UTC m=+496.071115955
I0528 21:50:56.964740       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:50:56.964727468 +0000 UTC m=+496.106089245
I0528 21:50:56.981695       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:50:57.027274       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:01.879822       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:51:01.879812944 +0000 UTC m=+501.021174701
I0528 21:51:53.863669       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-28 21:51:53.863625824 +0000 UTC m=+553.004987591
I0528 21:51:53.864298       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:51:53.864404       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 21:51:53.864398228 +0000 UTC m=+553.005759995
I0528 21:51:53.906744       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-28 21:51:53.906730967 +0000 UTC m=+553.048092734
I0528 21:51:53.908560       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:51:53.908610       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 21:51:53.908603797 +0000 UTC m=+553.049965584
I0528 21:51:53.909259       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-28 21:51:53.909252727 +0000 UTC m=+553.050614504
I0528 21:51:53.909507       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:51:53.909524       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-28 21:51:53.909520835 +0000 UTC m=+553.050882602
I0528 21:51:53.927053       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:53.927151       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:51:53.927182       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 21:51:53.927176269 +0000 UTC m=+553.068538026
I0528 21:51:54.007492       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:54.007567       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:51:54.007616       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 21:51:54.007608676 +0000 UTC m=+553.148970433
I0528 21:51:54.009074       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:54.009204       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:51:54.009246       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-28 21:51:54.009236597 +0000 UTC m=+553.150598384
I0528 21:51:54.422616       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-t9mvf" condition "Approved" to 2026-05-28 21:51:54.422596215 +0000 UTC m=+553.563958012
I0528 21:51:54.841187       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-t9mvf" condition "Ready" to 2026-05-28 21:51:54.841168156 +0000 UTC m=+553.982529943
I0528 21:51:54.982928       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:54.984293       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fzqvq" condition "Approved" to 2026-05-28 21:51:54.984279784 +0000 UTC m=+554.125641551
I0528 21:51:54.984593       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7j2zf" condition "Approved" to 2026-05-28 21:51:54.984582263 +0000 UTC m=+554.125944030
I0528 21:51:55.017262       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:51:55.017251189 +0000 UTC m=+554.158612936
I0528 21:51:55.018536       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fzqvq" condition "Ready" to 2026-05-28 21:51:55.018489079 +0000 UTC m=+554.159850846
I0528 21:51:55.019878       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7j2zf" condition "Ready" to 2026-05-28 21:51:55.019870772 +0000 UTC m=+554.161232539
I0528 21:51:55.060694       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:55.060882       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:51:55.060877011 +0000 UTC m=+554.202238758
I0528 21:51:55.099770       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:51:55.099749192 +0000 UTC m=+554.241110949
I0528 21:51:55.099378       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:51:55.099369931 +0000 UTC m=+554.240731688
I0528 21:51:55.108481       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:55.141738       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:55.142037       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:51:55.142030211 +0000 UTC m=+554.283391978
I0528 21:51:55.142321       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:55.357461       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:51:56.036850       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:52:15.196849       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" condition "Ready" to 2026-05-28 21:52:15.196837694 +0000 UTC m=+574.338199461
I0528 21:52:15.197541       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:52:15.197585       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" condition "Issuing" to 2026-05-28 21:52:15.197577917 +0000 UTC m=+574.338939684
I0528 21:52:15.222633       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:52:15.222760       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" condition "Ready" to 2026-05-28 21:52:15.222746031 +0000 UTC m=+574.364107818
I0528 21:52:15.295984       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:52:15.329360       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6zsv4-n22h9" condition "Approved" to 2026-05-28 21:52:15.329330936 +0000 UTC m=+574.470692733
I0528 21:52:15.352139       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6zsv4-n22h9" condition "Ready" to 2026-05-28 21:52:15.352118385 +0000 UTC m=+574.493480152
I0528 21:52:15.388570       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:52:15.388556435 +0000 UTC m=+574.529918192
I0528 21:52:15.419694       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:52:15.477871       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6zsv4-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:53:05.427419       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-28 21:53:05.427377601 +0000 UTC m=+624.568739398
I0528 21:53:05.427554       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:53:05.427719       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-28 21:53:05.427707485 +0000 UTC m=+624.569069272
I0528 21:53:05.853108       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:53:05.853191       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:53:05.853217       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-28 21:53:05.853202814 +0000 UTC m=+624.994564601
I0528 21:53:06.939823       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v2hcd" condition "Approved" to 2026-05-28 21:53:06.939803689 +0000 UTC m=+626.081165486
I0528 21:53:07.247755       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v2hcd" condition "Ready" to 2026-05-28 21:53:07.247743401 +0000 UTC m=+626.389105168
I0528 21:53:07.690909       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:53:07.69089479 +0000 UTC m=+626.832256567
I0528 21:53:07.864015       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:53:08.681094       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:56:28.764381       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 21:56:28.764359554 +0000 UTC m=+827.905721351
I0528 21:56:28.764089       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:56:28.764721       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-28 21:56:28.764708783 +0000 UTC m=+827.906070600
I0528 21:56:28.990881       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:56:28.990931       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:56:28.990946       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-28 21:56:28.990940496 +0000 UTC m=+828.132302253
I0528 21:56:29.558382       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:56:29.793642       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zd29s" condition "Approved" to 2026-05-28 21:56:29.793623368 +0000 UTC m=+828.934985175
I0528 21:56:30.101696       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zd29s" condition "Ready" to 2026-05-28 21:56:30.101674854 +0000 UTC m=+829.243036641
I0528 21:56:30.445333       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:56:30.445321276 +0000 UTC m=+829.586683043
I0528 21:56:30.537975       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:56:30.538377       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:56:30.538370293 +0000 UTC m=+829.679732050
I0528 21:56:30.585187       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:56:30.586082       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:57:19.773850       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-28 21:57:19.773806919 +0000 UTC m=+878.915168706
I0528 21:57:19.774201       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:57:19.774233       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-28 21:57:19.774225168 +0000 UTC m=+878.915586935
I0528 21:57:19.801831       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:57:19.801909       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0528 21:57:19.801931       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-28 21:57:19.801925 +0000 UTC m=+878.943286767
I0528 21:57:20.004803       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:57:20.016484       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kcrrv" condition "Approved" to 2026-05-28 21:57:20.01647372 +0000 UTC m=+879.157835487
I0528 21:57:20.038577       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kcrrv" condition "Ready" to 2026-05-28 21:57:20.038567888 +0000 UTC m=+879.179929645
I0528 21:57:20.130371       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:57:20.13035985 +0000 UTC m=+879.271721607
I0528 21:57:20.172284       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0528 21:57:20.172543       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 21:57:20.172535608 +0000 UTC m=+879.313897375
I0528 21:57:20.195484       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"