I0503 22:16:12.511507 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0503 22:16:12.511585 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0503 22:16:12.511637 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0503 22:16:12.517225 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0503 22:16:12.517734 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0503 22:16:12.517824 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0503 22:16:12.517827 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0503 22:16:12.521980 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0503 22:16:12.535514 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0503 22:16:12.535867 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0503 22:16:12.538240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0503 22:16:12.540398 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0503 22:16:12.543901 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0503 22:16:12.548539 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0503 22:16:12.552028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0503 22:16:12.556119 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0503 22:16:12.556232 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0503 22:16:12.558201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0503 22:16:12.560132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0503 22:16:12.561740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0503 22:16:12.567115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0503 22:16:12.571306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0503 22:16:12.574429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0503 22:16:12.577144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0503 22:16:12.579375 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0503 22:16:12.579405 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0503 22:16:12.579502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0503 22:16:12.581858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0503 22:16:12.584334 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0503 22:16:12.586322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0503 22:16:12.587950 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0503 22:16:12.587964 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0503 22:16:12.588849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0503 22:16:12.592480 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.592516 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.593092 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.593766 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.610527 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.627081 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.639981 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.655404 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.669355 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:12.678468 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0503 22:16:25.856847 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-03 22:16:25.856831644 +0000 UTC m=+13.374371075 I0503 22:16:26.634307 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-03 22:16:26.634289292 +0000 UTC m=+14.151828773 I0503 22:16:26.634479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:16:26.634524 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-03 22:16:26.634514356 +0000 UTC m=+14.152053777 I0503 22:16:26.683212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:16:26.683312 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-03 22:16:26.683297522 +0000 UTC m=+14.200837013 E0503 22:16:26.686919 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0503 22:16:26.686997 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-03 22:16:26.68698892 +0000 UTC m=+14.204528321 E0503 22:16:26.687023 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0503 22:16:26.765089 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0503 22:16:26.765274 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0503 22:16:26.765325 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0503 22:16:26.765369 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0503 22:16:26.770007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:16:26.922103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w5qwv" condition "Approved" to 2026-05-03 22:16:26.922086516 +0000 UTC m=+14.439625937 I0503 22:16:27.078113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w5qwv" condition "Ready" to 2026-05-03 22:16:27.078097703 +0000 UTC m=+14.595637134 I0503 22:16:27.146837 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:16:27.14682288 +0000 UTC m=+14.664362301 I0503 22:16:27.187150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:16:27.187437 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:16:27.187430314 +0000 UTC m=+14.704969715 I0503 22:16:27.208582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:16:27.218287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:16:31.765829 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:16:31.765815975 +0000 UTC m=+19.283355406 I0503 22:16:58.134013 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-03 22:16:58.133991306 +0000 UTC m=+45.651530707 I0503 22:16:58.134542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:16:58.134576 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-03 22:16:58.134570957 +0000 UTC m=+45.652110358 I0503 22:16:58.146597 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-03 22:16:58.14658328 +0000 UTC m=+45.664122681 I0503 22:16:58.166464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:16:58.166555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:16:58.166579 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-03 22:16:58.166571231 +0000 UTC m=+45.684110642 I0503 22:16:58.373862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2qmdf" condition "Approved" to 2026-05-03 22:16:58.37384947 +0000 UTC m=+45.891388871 I0503 22:16:58.399776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2qmdf" condition "Ready" to 2026-05-03 22:16:58.399764732 +0000 UTC m=+45.917304133 I0503 22:16:58.440158 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:16:58.440145852 +0000 UTC m=+45.957685243 I0503 22:16:58.462853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:16:58.463185 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:16:58.463176729 +0000 UTC m=+45.980716120 I0503 22:16:58.487287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:17.535783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:19:17.535853 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-03 22:19:17.535828828 +0000 UTC m=+185.053368219 I0503 22:19:17.535904 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-03 22:19:17.53587947 +0000 UTC m=+185.053418921 I0503 22:19:17.611742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:17.611803 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-03 22:19:17.611797279 +0000 UTC m=+185.129336680 E0503 22:19:17.616746 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0503 22:19:17.616843 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-03 22:19:17.616827231 +0000 UTC m=+185.134366672 I0503 22:19:17.616925 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0503 22:19:17.754010 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0503 22:19:17.754209 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0503 22:19:17.754261 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0503 22:19:17.754348 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0503 22:19:17.788843 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-03 22:19:17.7888204 +0000 UTC m=+185.306359831 I0503 22:19:17.788953 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:19:17.788990 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-03 22:19:17.788978223 +0000 UTC m=+185.306517654 I0503 22:19:17.939123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:17.939200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:19:17.939222 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-03 22:19:17.939214432 +0000 UTC m=+185.456753853 I0503 22:19:18.373742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:18.480439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5qnx6" condition "Approved" to 2026-05-03 22:19:18.480417903 +0000 UTC m=+185.997957334 I0503 22:19:18.582108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5qnx6" condition "Ready" to 2026-05-03 22:19:18.582091407 +0000 UTC m=+186.099630838 I0503 22:19:19.176631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-7mqv7" condition "Approved" to 2026-05-03 22:19:19.176615131 +0000 UTC m=+186.694154552 I0503 22:19:19.242396 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:19:19.242377952 +0000 UTC m=+186.759917373 I0503 22:19:19.248180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-7mqv7" condition "Ready" to 2026-05-03 22:19:19.248161679 +0000 UTC m=+186.765701110 I0503 22:19:19.406964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:19.617796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:22.754800 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:19:22.75478737 +0000 UTC m=+190.272326801 I0503 22:19:22.789478 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-7mqv7" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:19:22.789469699 +0000 UTC m=+190.307009100 I0503 22:19:22.828985 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:19:22.828964007 +0000 UTC m=+190.346503428 I0503 22:19:22.850650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:22.851271 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:19:22.851258637 +0000 UTC m=+190.368798078 I0503 22:19:22.855763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:22.874536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:22.876446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:19:22.876905 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:19:22.876889749 +0000 UTC m=+190.394429170 I0503 22:22:06.586753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:22:06.586893 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-05-03 22:22:06.586859733 +0000 UTC m=+354.104399164 I0503 22:22:06.587224 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-05-03 22:22:06.587191329 +0000 UTC m=+354.104730760 I0503 22:22:06.609057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:22:06.609167 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-05-03 22:22:06.609154105 +0000 UTC m=+354.126693536 I0503 22:22:06.735175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:22:06.765459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-gkw27" condition "Approved" to 2026-05-03 22:22:06.765439916 +0000 UTC m=+354.282979317 I0503 22:22:06.786178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-gkw27" condition "Ready" to 2026-05-03 22:22:06.786132859 +0000 UTC m=+354.303672280 I0503 22:22:06.811738 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:22:06.811724852 +0000 UTC m=+354.329264253 I0503 22:22:06.836153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:22:06.836488 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:22:06.83648192 +0000 UTC m=+354.354021321 I0503 22:22:06.852132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:22:06.857884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:23:16.512388 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-03 22:23:16.512357307 +0000 UTC m=+424.029896708 I0503 22:23:16.512499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:23:16.512567 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-03 22:23:16.51255602 +0000 UTC m=+424.030095441 E0503 22:23:16.522311 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0503 22:23:16.522345 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-03 22:23:16.522338221 +0000 UTC m=+424.039877612 E0503 22:23:16.522383 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0503 22:23:16.527276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:23:16.527384 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-03 22:23:16.527368154 +0000 UTC m=+424.044907635 E0503 22:23:16.533009 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0503 22:23:16.533123 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0503 22:23:16.533165 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0503 22:23:16.533205 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0503 22:23:16.539143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:23:16.539210 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-03 22:23:16.539202883 +0000 UTC m=+424.056742284 I0503 22:23:16.543728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z9lxz" condition "Approved" to 2026-05-03 22:23:16.543716436 +0000 UTC m=+424.061255837 I0503 22:23:16.556061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z9lxz" condition "Ready" to 2026-05-03 22:23:16.556047774 +0000 UTC m=+424.073587165 I0503 22:23:16.576476 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:23:16.576460092 +0000 UTC m=+424.093999493 I0503 22:23:16.592667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:23:16.636133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:23:21.533822 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:23:21.533802725 +0000 UTC m=+429.051342156 I0503 22:24:00.020697 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-03 22:24:00.020673578 +0000 UTC m=+467.538213019 I0503 22:24:00.020697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:24:00.020768 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-03 22:24:00.020761069 +0000 UTC m=+467.538300470 I0503 22:24:00.022943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:24:00.022980 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-03 22:24:00.022965471 +0000 UTC m=+467.540504912 I0503 22:24:00.023000 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-03 22:24:00.022989691 +0000 UTC m=+467.540529102 I0503 22:24:00.023042 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-03 22:24:00.023026472 +0000 UTC m=+467.540565873 I0503 22:24:00.023257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:24:00.023301 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-03 22:24:00.023291876 +0000 UTC m=+467.540831307 I0503 22:24:00.079842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.079976 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-03 22:24:00.079968195 +0000 UTC m=+467.597507587 I0503 22:24:00.077191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.084324 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-03 22:24:00.084302685 +0000 UTC m=+467.601842076 I0503 22:24:00.088280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.088622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:24:00.088677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-03 22:24:00.088668266 +0000 UTC m=+467.606207687 I0503 22:24:00.258656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.264384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9cf9m" condition "Approved" to 2026-05-03 22:24:00.264373246 +0000 UTC m=+467.781912637 I0503 22:24:00.276071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.283816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9cf9m" condition "Ready" to 2026-05-03 22:24:00.283804115 +0000 UTC m=+467.801343516 I0503 22:24:00.317256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jcm7n" condition "Approved" to 2026-05-03 22:24:00.317246634 +0000 UTC m=+467.834786025 I0503 22:24:00.319404 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:00.319398154 +0000 UTC m=+467.836937555 I0503 22:24:00.349895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jcm7n" condition "Ready" to 2026-05-03 22:24:00.349883807 +0000 UTC m=+467.867423198 I0503 22:24:00.352528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.352832 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:00.352823262 +0000 UTC m=+467.870362653 E0503 22:24:00.373262 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-9tzj7\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0503 22:24:00.380635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.380869 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:00.380862161 +0000 UTC m=+467.898401552 I0503 22:24:00.382760 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:00.382746096 +0000 UTC m=+467.900285487 I0503 22:24:00.462970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.610595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:00.916982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lhzvd" condition "Approved" to 2026-05-03 22:24:00.916969597 +0000 UTC m=+468.434508988 I0503 22:24:01.076733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lhzvd" condition "Ready" to 2026-05-03 22:24:01.076716303 +0000 UTC m=+468.594255734 I0503 22:24:01.363453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:01.562329 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:01.562308944 +0000 UTC m=+469.079848375 I0503 22:24:01.664314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:01.664666 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:01.664659347 +0000 UTC m=+469.182198748 I0503 22:24:01.892449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:08.889391 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" condition "Ready" to 2026-05-03 22:24:08.889372546 +0000 UTC m=+476.406911977 I0503 22:24:08.889758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:24:08.889798 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" condition "Issuing" to 2026-05-03 22:24:08.889790694 +0000 UTC m=+476.407330095 I0503 22:24:08.906670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:08.906810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:24:08.906867 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" condition "Issuing" to 2026-05-03 22:24:08.90685741 +0000 UTC m=+476.424396801 I0503 22:24:09.092236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fcxk2-gg9gh" condition "Approved" to 2026-05-03 22:24:09.092222879 +0000 UTC m=+476.609762270 I0503 22:24:09.110856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fcxk2-gg9gh" condition "Ready" to 2026-05-03 22:24:09.110819593 +0000 UTC m=+476.628359024 I0503 22:24:09.144230 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:09.14420396 +0000 UTC m=+476.661743351 I0503 22:24:09.164573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:09.166064 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:09.166050644 +0000 UTC m=+476.683590075 I0503 22:24:09.172377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:09.182322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fcxk2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:44.450082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:24:44.450257 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-03 22:24:44.450243532 +0000 UTC m=+511.967782953 I0503 22:24:44.450148 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-03 22:24:44.45012926 +0000 UTC m=+511.967668681 I0503 22:24:44.469590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:44.469670 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-03 22:24:44.469662361 +0000 UTC m=+511.987201762 I0503 22:24:44.592359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:44.618901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-stgtn" condition "Approved" to 2026-05-03 22:24:44.618887031 +0000 UTC m=+512.136426442 I0503 22:24:44.641620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-stgtn" condition "Ready" to 2026-05-03 22:24:44.641604771 +0000 UTC m=+512.159144172 I0503 22:24:44.673779 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:44.673759976 +0000 UTC m=+512.191299407 I0503 22:24:44.733603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:44.734129 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:24:44.734114352 +0000 UTC m=+512.251653783 I0503 22:24:44.868934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:24:44.869529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:28:15.270010 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-03 22:28:15.26996981 +0000 UTC m=+722.787509231 I0503 22:28:15.270036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:28:15.270109 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-03 22:28:15.270102262 +0000 UTC m=+722.787641663 I0503 22:28:15.296016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:28:15.296079 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-03 22:28:15.296073351 +0000 UTC m=+722.813612752 I0503 22:28:15.486897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:28:15.516076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4stw2" condition "Approved" to 2026-05-03 22:28:15.51606183 +0000 UTC m=+723.033601231 I0503 22:28:15.531520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4stw2" condition "Ready" to 2026-05-03 22:28:15.531509664 +0000 UTC m=+723.049049065 I0503 22:28:15.558759 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:28:15.558748415 +0000 UTC m=+723.076287816 I0503 22:28:15.579560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:28:15.580153 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:28:15.580143659 +0000 UTC m=+723.097683080 I0503 22:28:15.600471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:30:45.664535 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:30:45.664660 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-03 22:30:45.664619234 +0000 UTC m=+873.182158665 I0503 22:30:45.664659 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-03 22:30:45.664611904 +0000 UTC m=+873.182151305 I0503 22:30:45.682825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:30:45.682955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:30:45.682988 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-03 22:30:45.68297697 +0000 UTC m=+873.200516401 I0503 22:30:46.026767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zx8z9" condition "Approved" to 2026-05-03 22:30:46.026751407 +0000 UTC m=+873.544290798 I0503 22:30:46.050201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zx8z9" condition "Ready" to 2026-05-03 22:30:46.050183106 +0000 UTC m=+873.567722527 I0503 22:30:46.085523 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:30:46.085504652 +0000 UTC m=+873.603044053 I0503 22:30:46.113148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:30:46.175497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:32:04.459024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:32:04.459142 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-03 22:32:04.459109238 +0000 UTC m=+951.976648669 I0503 22:32:04.459583 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-03 22:32:04.459052157 +0000 UTC m=+951.976591558 I0503 22:32:04.483507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:32:04.483723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:32:04.483756 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-03 22:32:04.483745409 +0000 UTC m=+952.001284830 I0503 22:32:04.642713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-k5fbt" condition "Approved" to 2026-05-03 22:32:04.642694886 +0000 UTC m=+952.160234317 I0503 22:32:04.662511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-k5fbt" condition "Ready" to 2026-05-03 22:32:04.662494138 +0000 UTC m=+952.180033539 I0503 22:32:04.703854 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:32:04.703837335 +0000 UTC m=+952.221376726 I0503 22:32:04.729351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:32:04.798821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:35:21.380068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:35:21.380241 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-03 22:35:21.380096561 +0000 UTC m=+1148.897635972 I0503 22:35:21.380360 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-03 22:35:21.380310425 +0000 UTC m=+1148.897849856 I0503 22:35:21.403349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:35:21.403481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:35:21.403532 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-03 22:35:21.403524675 +0000 UTC m=+1148.921064076 I0503 22:35:21.620641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:35:21.625446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-ttft2" condition "Approved" to 2026-05-03 22:35:21.625431888 +0000 UTC m=+1149.142971289 I0503 22:35:21.643358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-ttft2" condition "Ready" to 2026-05-03 22:35:21.643345976 +0000 UTC m=+1149.160885377 I0503 22:35:21.676452 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:35:21.676441097 +0000 UTC m=+1149.193980498 I0503 22:35:21.706535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:35:21.707084 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:35:21.707072931 +0000 UTC m=+1149.224612332 I0503 22:35:21.729728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:35:21.733267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:35:21.733685 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:35:21.733673287 +0000 UTC m=+1149.251212718 I0503 22:43:22.253616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:43:22.253864 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-03 22:43:22.253815225 +0000 UTC m=+1629.771354646 I0503 22:43:22.254202 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-03 22:43:22.254182183 +0000 UTC m=+1629.771721604 I0503 22:43:22.280252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:43:22.280401 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-03 22:43:22.280388264 +0000 UTC m=+1629.797927675 I0503 22:43:22.425958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:43:22.465981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-bdmcb" condition "Approved" to 2026-05-03 22:43:22.465962316 +0000 UTC m=+1629.983501717 I0503 22:43:22.485466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-bdmcb" condition "Ready" to 2026-05-03 22:43:22.485446427 +0000 UTC m=+1630.002985838 I0503 22:43:22.520219 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:43:22.520201483 +0000 UTC m=+1630.037740874 I0503 22:43:22.560279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:43:22.613669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:45:04.188083 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0503 22:45:04.188169 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-03 22:45:04.188162 +0000 UTC m=+1731.705701391 I0503 22:45:04.188853 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-03 22:45:04.188204481 +0000 UTC m=+1731.705743932 I0503 22:45:04.211359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:45:04.211488 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-03 22:45:04.21147375 +0000 UTC m=+1731.729013151 I0503 22:45:04.557328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:45:04.597018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-l2pmd" condition "Approved" to 2026-05-03 22:45:04.597005883 +0000 UTC m=+1732.114545284 I0503 22:45:04.618611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-l2pmd" condition "Ready" to 2026-05-03 22:45:04.618599312 +0000 UTC m=+1732.136138713 I0503 22:45:04.647910 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:45:04.647897829 +0000 UTC m=+1732.165437230 I0503 22:45:04.671161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:45:04.671777 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-03 22:45:04.671766879 +0000 UTC m=+1732.189306300 I0503 22:45:04.682542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0503 22:45:04.692781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"