I0412 18:32:08.751364 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0412 18:32:08.751473 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0412 18:32:08.751542 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0412 18:32:08.755040 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0412 18:32:08.755442 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0412 18:32:08.755559 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0412 18:32:08.755747 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0412 18:32:08.758228 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0412 18:32:08.773438 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0412 18:32:08.777336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0412 18:32:08.783212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0412 18:32:08.786244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0412 18:32:08.789059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0412 18:32:08.791391 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0412 18:32:08.791430 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0412 18:32:08.791506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0412 18:32:08.794052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0412 18:32:08.795983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0412 18:32:08.802274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0412 18:32:08.806506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0412 18:32:08.809225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0412 18:32:08.811749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0412 18:32:08.814500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0412 18:32:08.816965 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0412 18:32:08.816999 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0412 18:32:08.817078 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0412 18:32:08.819332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0412 18:32:08.822452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0412 18:32:08.828321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0412 18:32:08.831849 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0412 18:32:08.831894 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0412 18:32:08.831944 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0412 18:32:08.834890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0412 18:32:08.837821 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.838594 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.838700 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.839916 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.840606 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.841513 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.842112 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.863461 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.882988 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:08.924102 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 18:32:18.726347 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-12 18:32:18.726333326 +0000 UTC m=+10.009908172 I0412 18:32:19.473946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:32:19.474045 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 18:32:19.474033337 +0000 UTC m=+10.757608213 I0412 18:32:19.474100 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 18:32:19.474083128 +0000 UTC m=+10.757657974 E0412 18:32:19.487952 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 18:32:19.488034 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-12 18:32:19.488024621 +0000 UTC m=+10.771599477 E0412 18:32:19.488081 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 18:32:19.490540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:32:19.491332 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 18:32:19.491324154 +0000 UTC m=+10.774899000 E0412 18:32:19.502150 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0412 18:32:19.502396 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 18:32:19.502477 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 18:32:19.502543 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0412 18:32:19.508346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:32:19.539023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wzqw2" condition "Approved" to 2026-04-12 18:32:19.539013289 +0000 UTC m=+10.822588125 I0412 18:32:19.551724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-wzqw2" condition "Ready" to 2026-04-12 18:32:19.551713888 +0000 UTC m=+10.835288734 I0412 18:32:19.573550 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:32:19.573541513 +0000 UTC m=+10.857116359 I0412 18:32:19.594043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:32:19.640055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:32:24.502720 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:32:24.502706603 +0000 UTC m=+15.786281479 I0412 18:32:44.916289 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 18:32:44.916274843 +0000 UTC m=+36.199849689 I0412 18:32:44.916413 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:32:44.917285 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 18:32:44.917267071 +0000 UTC m=+36.200841997 I0412 18:32:44.928412 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-12 18:32:44.928399698 +0000 UTC m=+36.211974544 I0412 18:32:44.940424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:32:44.940517 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 18:32:44.940508903 +0000 UTC m=+36.224083749 I0412 18:32:45.233842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:32:45.266527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4xk69" condition "Approved" to 2026-04-12 18:32:45.266510768 +0000 UTC m=+36.550085644 I0412 18:32:45.304851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4xk69" condition "Ready" to 2026-04-12 18:32:45.304830749 +0000 UTC m=+36.588405625 I0412 18:32:45.348739 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:32:45.348721867 +0000 UTC m=+36.632296703 I0412 18:32:45.374067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:32:45.424089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:34:20.099769 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-12 18:34:20.099752045 +0000 UTC m=+131.383326921 I0412 18:34:20.099897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:34:20.099963 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 18:34:20.09994923 +0000 UTC m=+131.383524096 I0412 18:34:20.117310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:34:20.117458 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-12 18:34:20.117446623 +0000 UTC m=+131.401021489 E0412 18:34:20.117991 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 18:34:20.118093 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-12 18:34:20.118082831 +0000 UTC m=+131.401657677 I0412 18:34:20.118127 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0412 18:34:20.129611 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0412 18:34:20.130074 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 18:34:20.130102 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0412 18:34:20.130140 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0412 18:34:20.133215 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-12 18:34:20.133196336 +0000 UTC m=+131.416771212 I0412 18:34:20.133508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:34:20.133529 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 18:34:20.133523215 +0000 UTC m=+131.417098061 I0412 18:34:20.148518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:34:20.148593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:34:20.148626 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 18:34:20.148614981 +0000 UTC m=+131.432189817 I0412 18:34:20.295940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:34:20.323580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-x2sc8" condition "Approved" to 2026-04-12 18:34:20.323566802 +0000 UTC m=+131.607141658 I0412 18:34:20.331061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:34:20.339393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cjc6q" condition "Approved" to 2026-04-12 18:34:20.339373807 +0000 UTC m=+131.622948693 I0412 18:34:20.358558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cjc6q" condition "Ready" to 2026-04-12 18:34:20.358537936 +0000 UTC m=+131.642112812 I0412 18:34:20.358824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-x2sc8" condition "Ready" to 2026-04-12 18:34:20.358811244 +0000 UTC m=+131.642386100 I0412 18:34:20.394842 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:34:20.394828127 +0000 UTC m=+131.678402963 I0412 18:34:20.422473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:34:25.130461 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:34:25.130441123 +0000 UTC m=+136.414015989 I0412 18:34:25.147555 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-cjc6q" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:34:25.147544594 +0000 UTC m=+136.431119440 I0412 18:34:25.189816 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:34:25.189799153 +0000 UTC m=+136.473374019 I0412 18:34:25.209007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:34:25.209334 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:34:25.209326692 +0000 UTC m=+136.492901538 I0412 18:34:25.229099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:36:58.060298 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-04-12 18:36:58.060283758 +0000 UTC m=+289.343858594 I0412 18:36:58.060372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-65.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:36:58.060424 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Issuing" to 2026-04-12 18:36:58.060410571 +0000 UTC m=+289.343985447 I0412 18:36:58.078347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:36:58.078416 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-04-12 18:36:58.078407814 +0000 UTC m=+289.361982650 I0412 18:36:58.331944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:36:58.366222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-n2skv" condition "Approved" to 2026-04-12 18:36:58.366207669 +0000 UTC m=+289.649782515 I0412 18:36:58.383231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-n2skv" condition "Ready" to 2026-04-12 18:36:58.383216575 +0000 UTC m=+289.666791421 I0412 18:36:58.407163 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:36:58.407148144 +0000 UTC m=+289.690722990 I0412 18:36:58.427820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:11.772117 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 18:38:11.772101615 +0000 UTC m=+363.055676481 I0412 18:38:11.772759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:38:11.772792 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 18:38:11.772785435 +0000 UTC m=+363.056360311 E0412 18:38:11.782882 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 18:38:11.782915 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-12 18:38:11.782909723 +0000 UTC m=+363.066484569 E0412 18:38:11.782961 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 18:38:11.786392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:11.786467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:38:11.786508 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 18:38:11.786497742 +0000 UTC m=+363.070072618 E0412 18:38:11.792575 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0412 18:38:11.792679 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 18:38:11.792724 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 18:38:11.792769 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0412 18:38:11.822351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hbrlh" condition "Approved" to 2026-04-12 18:38:11.822338652 +0000 UTC m=+363.105913498 I0412 18:38:11.835741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hbrlh" condition "Ready" to 2026-04-12 18:38:11.835724772 +0000 UTC m=+363.119299638 I0412 18:38:11.856393 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:38:11.856374572 +0000 UTC m=+363.139949448 I0412 18:38:11.871934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:16.793204 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:38:16.793184468 +0000 UTC m=+368.076759334 I0412 18:38:56.917520 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 18:38:56.917500441 +0000 UTC m=+408.201075307 I0412 18:38:56.917700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:38:56.917739 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 18:38:56.917732217 +0000 UTC m=+408.201307083 I0412 18:38:56.927203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:38:56.927239 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 18:38:56.927231113 +0000 UTC m=+408.210805949 I0412 18:38:56.927464 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 18:38:56.927458689 +0000 UTC m=+408.211033525 I0412 18:38:56.927823 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 18:38:56.927800528 +0000 UTC m=+408.211375384 I0412 18:38:56.927882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:38:56.929440 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 18:38:56.929428315 +0000 UTC m=+408.213003171 I0412 18:38:56.949616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:56.949679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:38:56.949692 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 18:38:56.949687102 +0000 UTC m=+408.233261938 I0412 18:38:56.953556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:56.953655 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 18:38:56.953644164 +0000 UTC m=+408.237219010 I0412 18:38:56.954908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:56.954991 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 18:38:56.954984731 +0000 UTC m=+408.238559577 I0412 18:38:57.242277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:57.274474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-75ccj" condition "Approved" to 2026-04-12 18:38:57.274454476 +0000 UTC m=+408.558029322 I0412 18:38:57.299043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-75ccj" condition "Ready" to 2026-04-12 18:38:57.299006904 +0000 UTC m=+408.582581780 I0412 18:38:57.300898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:57.329734 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:38:57.329717105 +0000 UTC m=+408.613291971 I0412 18:38:57.334013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lxzf6" condition "Approved" to 2026-04-12 18:38:57.333998384 +0000 UTC m=+408.617573260 I0412 18:38:57.353142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lxzf6" condition "Ready" to 2026-04-12 18:38:57.353131551 +0000 UTC m=+408.636706387 I0412 18:38:57.359700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:57.360094 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:38:57.360044005 +0000 UTC m=+408.643618851 I0412 18:38:57.386944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:57.404426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:38:57.404554 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 18:38:57.404546323 +0000 UTC m=+408.688121169 I0412 18:38:57.427636 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:38:57.42762415 +0000 UTC m=+408.711198996 I0412 18:38:57.517951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:57.617717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:57.618058 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:38:57.618049347 +0000 UTC m=+408.901624193 I0412 18:38:57.924279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r7wdn" condition "Approved" to 2026-04-12 18:38:57.92426402 +0000 UTC m=+409.207838896 I0412 18:38:57.965890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:58.023056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ljk2w" condition "Approved" to 2026-04-12 18:38:58.023038029 +0000 UTC m=+409.306612895 I0412 18:38:58.431166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-r7wdn" condition "Ready" to 2026-04-12 18:38:58.431149098 +0000 UTC m=+409.714723974 I0412 18:38:58.479965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ljk2w" condition "Ready" to 2026-04-12 18:38:58.479952406 +0000 UTC m=+409.763527252 I0412 18:38:59.118038 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:38:59.118022532 +0000 UTC m=+410.401597368 I0412 18:38:59.267993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:59.449825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:59.620050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:38:59.719684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:00.024128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:04.964753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:39:04.964795 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" condition "Ready" to 2026-04-12 18:39:04.96476622 +0000 UTC m=+416.248341116 I0412 18:39:04.964805 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" condition "Issuing" to 2026-04-12 18:39:04.96479298 +0000 UTC m=+416.248367846 I0412 18:39:04.980337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:04.980402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:39:04.980415 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" condition "Issuing" to 2026-04-12 18:39:04.980409599 +0000 UTC m=+416.263984435 I0412 18:39:05.110853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:05.122470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lmlg6-67sn9" condition "Approved" to 2026-04-12 18:39:05.1224543 +0000 UTC m=+416.406029166 I0412 18:39:05.151096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lmlg6-67sn9" condition "Ready" to 2026-04-12 18:39:05.151086373 +0000 UTC m=+416.434661199 I0412 18:39:05.179390 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:39:05.179369245 +0000 UTC m=+416.462944091 I0412 18:39:05.197615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:05.197982 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:39:05.197973027 +0000 UTC m=+416.481547863 I0412 18:39:05.235352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lmlg6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:25.523416 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 18:39:25.523386691 +0000 UTC m=+436.806961527 I0412 18:39:25.523813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:39:25.523835 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 18:39:25.523830823 +0000 UTC m=+436.807405659 I0412 18:39:25.579835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:25.579950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:39:25.579970 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 18:39:25.579963027 +0000 UTC m=+436.863537873 I0412 18:39:25.765298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:25.774586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tw6nb" condition "Approved" to 2026-04-12 18:39:25.774570662 +0000 UTC m=+437.058145498 I0412 18:39:25.796332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tw6nb" condition "Ready" to 2026-04-12 18:39:25.796320771 +0000 UTC m=+437.079895617 I0412 18:39:25.824771 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:39:25.824754909 +0000 UTC m=+437.108329755 I0412 18:39:25.847465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:25.847909 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:39:25.847899978 +0000 UTC m=+437.131474844 I0412 18:39:25.856837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:39:25.875120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:42:51.304367 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 18:42:51.30434915 +0000 UTC m=+642.587923986 I0412 18:42:51.304756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:42:51.304894 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-12 18:42:51.304873825 +0000 UTC m=+642.588448731 I0412 18:42:51.327380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:42:51.327496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:42:51.327521 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-12 18:42:51.327513644 +0000 UTC m=+642.611088490 I0412 18:42:51.505538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bcrm2" condition "Approved" to 2026-04-12 18:42:51.505522314 +0000 UTC m=+642.789097160 I0412 18:42:51.527366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bcrm2" condition "Ready" to 2026-04-12 18:42:51.52734931 +0000 UTC m=+642.810924156 I0412 18:42:51.563444 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:42:51.563420233 +0000 UTC m=+642.846995099 I0412 18:42:51.588057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:42:51.588494 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:42:51.58848546 +0000 UTC m=+642.872060306 I0412 18:42:51.609559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:45:21.634510 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-12 18:45:21.634488092 +0000 UTC m=+792.918062938 I0412 18:45:21.634576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:45:21.634642 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-12 18:45:21.634636226 +0000 UTC m=+792.918211072 I0412 18:45:21.651215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:45:21.651337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:45:21.651366 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-12 18:45:21.651356744 +0000 UTC m=+792.934931590 I0412 18:45:22.043450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qdpw7" condition "Approved" to 2026-04-12 18:45:22.043422891 +0000 UTC m=+793.326997727 I0412 18:45:22.073524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qdpw7" condition "Ready" to 2026-04-12 18:45:22.073506103 +0000 UTC m=+793.357080939 I0412 18:45:22.099325 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:45:22.099312626 +0000 UTC m=+793.382887472 I0412 18:45:22.128400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:45:22.128729 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:45:22.12872271 +0000 UTC m=+793.412297556 I0412 18:45:22.148655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:45:22.149124 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:45:22.149109322 +0000 UTC m=+793.432684198 I0412 18:45:22.149446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:46:31.646745 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 18:46:31.646627682 +0000 UTC m=+862.930202538 I0412 18:46:31.646983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:46:31.647099 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-12 18:46:31.647086805 +0000 UTC m=+862.930661681 I0412 18:46:31.675926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:46:31.676025 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 18:46:31.676016275 +0000 UTC m=+862.959591121 I0412 18:46:31.832784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:46:31.875256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rctvn" condition "Approved" to 2026-04-12 18:46:31.875240572 +0000 UTC m=+863.158815418 I0412 18:46:31.907260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rctvn" condition "Ready" to 2026-04-12 18:46:31.907245779 +0000 UTC m=+863.190820625 I0412 18:46:31.956720 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:46:31.956694482 +0000 UTC m=+863.240269348 I0412 18:46:31.998768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:46:31.999132 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:46:31.9991247 +0000 UTC m=+863.282699536 I0412 18:46:32.025460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:49:39.216233 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 18:49:39.216341 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-12 18:49:39.216332526 +0000 UTC m=+1050.499907412 I0412 18:49:39.216233 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-12 18:49:39.216172701 +0000 UTC m=+1050.499747647 I0412 18:49:39.237753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:49:39.237865 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-12 18:49:39.237855564 +0000 UTC m=+1050.521430410 I0412 18:49:39.329477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:49:39.374343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-b2766" condition "Approved" to 2026-04-12 18:49:39.374319326 +0000 UTC m=+1050.657894172 I0412 18:49:39.404585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-b2766" condition "Ready" to 2026-04-12 18:49:39.404571077 +0000 UTC m=+1050.688145923 I0412 18:49:39.435662 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:49:39.435638581 +0000 UTC m=+1050.719213447 I0412 18:49:39.459859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:49:39.460227 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:49:39.460219324 +0000 UTC m=+1050.743794170 I0412 18:49:39.476618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 18:49:39.476999 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 18:49:39.47698968 +0000 UTC m=+1050.760564526