I0505 12:51:13.324346 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 12:51:13.324490 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 12:51:13.324584 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 12:51:13.329399 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 12:51:13.329842 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 12:51:13.329884 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 12:51:13.329908 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 12:51:13.333009 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 12:51:13.348452 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 12:51:13.353575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 12:51:13.359132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 12:51:13.361336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 12:51:13.363103 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 12:51:13.363230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 12:51:13.364834 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 12:51:13.364967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 12:51:13.366577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 12:51:13.368257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 12:51:13.369939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 12:51:13.374127 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 12:51:13.374152 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 12:51:13.374161 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 12:51:13.374196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 12:51:13.377851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 12:51:13.381547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 12:51:13.383306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 12:51:13.385020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 12:51:13.386956 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 12:51:13.389204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 12:51:13.390751 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 12:51:13.390791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 12:51:13.392588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 12:51:13.396551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 12:51:13.399094 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.399991 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.400614 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.418498 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.429855 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.444776 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.458625 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.479113 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.484947 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:13.499878 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 12:51:29.740079 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 12:51:29.740062932 +0000 UTC m=+16.454986801 I0505 12:51:30.458221 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 12:51:30.458206061 +0000 UTC m=+17.173129940 I0505 12:51:30.458374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:51:30.458414 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 12:51:30.458407506 +0000 UTC m=+17.173331355 E0505 12:51:30.473233 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 12:51:30.473373 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 12:51:30.473361477 +0000 UTC m=+17.188285356 E0505 12:51:30.473413 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 12:51:30.476050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:30.476202 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 12:51:30.476189133 +0000 UTC m=+17.191113012 E0505 12:51:30.487722 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 12:51:30.487935 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 12:51:30.488200 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 12:51:30.488270 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 12:51:30.493525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:30.493738 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 12:51:30.493721072 +0000 UTC m=+17.208644971 I0505 12:51:30.501040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-khg7v" condition "Approved" to 2026-05-05 12:51:30.501032049 +0000 UTC m=+17.215955898 I0505 12:51:30.512222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-khg7v" condition "Ready" to 2026-05-05 12:51:30.512211488 +0000 UTC m=+17.227135337 I0505 12:51:30.535388 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:51:30.535377908 +0000 UTC m=+17.250301767 I0505 12:51:30.549682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:30.600848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:35.488154 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:51:35.48814206 +0000 UTC m=+22.203065909 I0505 12:51:53.369834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:51:53.369937 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 12:51:53.369925192 +0000 UTC m=+40.084849071 I0505 12:51:53.370255 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 12:51:53.37024669 +0000 UTC m=+40.085170569 I0505 12:51:53.379025 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 12:51:53.379015027 +0000 UTC m=+40.093938876 I0505 12:51:53.395944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:53.396003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:51:53.396017 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 12:51:53.396012648 +0000 UTC m=+40.110936487 I0505 12:51:53.725789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:53.732349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cr9pj" condition "Approved" to 2026-05-05 12:51:53.732331253 +0000 UTC m=+40.447255112 I0505 12:51:53.761872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cr9pj" condition "Ready" to 2026-05-05 12:51:53.761856703 +0000 UTC m=+40.476780552 I0505 12:51:53.797321 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:51:53.797308923 +0000 UTC m=+40.512232772 I0505 12:51:53.821026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:51:53.821456 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:51:53.821448346 +0000 UTC m=+40.536372195 I0505 12:51:53.844007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:53:35.489631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:53:35.489685 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-05 12:53:35.489673758 +0000 UTC m=+142.204597627 I0505 12:53:35.489731 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-05 12:53:35.489705789 +0000 UTC m=+142.204629678 E0505 12:53:35.506751 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 12:53:35.506788 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-05 12:53:35.506776385 +0000 UTC m=+142.221700214 I0505 12:53:35.506819 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 12:53:35.508362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:53:35.508420 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-05 12:53:35.50841672 +0000 UTC m=+142.223340549 E0505 12:53:35.516064 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0505 12:53:35.516583 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 12:53:35.516673 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0505 12:53:35.516744 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0505 12:53:35.522459 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-05 12:53:35.522443763 +0000 UTC m=+142.237367612 I0505 12:53:35.522741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:53:35.522793 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-05 12:53:35.522779422 +0000 UTC m=+142.237703301 I0505 12:53:35.535144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:53:35.535238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:53:35.535275 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-05 12:53:35.535264184 +0000 UTC m=+142.250188053 I0505 12:53:35.610407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:53:35.641004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-s7b5n" condition "Approved" to 2026-05-05 12:53:35.64099113 +0000 UTC m=+142.355914979 I0505 12:53:35.671382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-s7b5n" condition "Ready" to 2026-05-05 12:53:35.671369729 +0000 UTC m=+142.386293568 I0505 12:53:35.701608 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:53:35.701579794 +0000 UTC m=+142.416503643 I0505 12:53:35.720189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:53:35.828943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-54rr6" condition "Approved" to 2026-05-05 12:53:35.828926671 +0000 UTC m=+142.543850540 I0505 12:53:35.846639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-54rr6" condition "Ready" to 2026-05-05 12:53:35.846624204 +0000 UTC m=+142.561548043 I0505 12:53:40.517040 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:53:40.517026836 +0000 UTC m=+147.231950715 I0505 12:53:40.538910 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-54rr6" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:53:40.538893443 +0000 UTC m=+147.253817292 I0505 12:53:40.569560 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:53:40.56954441 +0000 UTC m=+147.284468289 I0505 12:53:40.593029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:53:40.642586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:56:06.998457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:56:06.998493 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-05-05 12:56:06.998485137 +0000 UTC m=+293.713408996 I0505 12:56:06.998591 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-05-05 12:56:06.998550938 +0000 UTC m=+293.713474817 I0505 12:56:07.018007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:56:07.018089 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-05-05 12:56:07.018082045 +0000 UTC m=+293.733005894 I0505 12:56:07.093317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:56:07.121637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-k5s47" condition "Approved" to 2026-05-05 12:56:07.121622687 +0000 UTC m=+293.836546556 I0505 12:56:07.138006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-k5s47" condition "Ready" to 2026-05-05 12:56:07.137994876 +0000 UTC m=+293.852918725 I0505 12:56:07.162375 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:56:07.162364784 +0000 UTC m=+293.877288633 I0505 12:56:07.184686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:16.593911 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 12:57:16.593847428 +0000 UTC m=+363.308771307 I0505 12:57:16.594786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:57:16.594838 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 12:57:16.594826635 +0000 UTC m=+363.309750504 E0505 12:57:16.607660 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 12:57:16.607707 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 12:57:16.607699443 +0000 UTC m=+363.322623312 E0505 12:57:16.607769 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 12:57:16.609686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:16.609753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:57:16.609809 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 12:57:16.609801232 +0000 UTC m=+363.324725081 E0505 12:57:16.616676 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 12:57:16.616762 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 12:57:16.616790 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 12:57:16.616842 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 12:57:16.639319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:16.645580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8wlzh" condition "Approved" to 2026-05-05 12:57:16.645570168 +0000 UTC m=+363.360494027 I0505 12:57:16.657296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8wlzh" condition "Ready" to 2026-05-05 12:57:16.657284554 +0000 UTC m=+363.372208403 I0505 12:57:16.677687 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:57:16.677674242 +0000 UTC m=+363.392598081 I0505 12:57:16.692484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:21.617916 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:57:21.617897621 +0000 UTC m=+368.332821490 I0505 12:57:57.871693 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:57:57.871756 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 12:57:57.871748829 +0000 UTC m=+404.586672678 I0505 12:57:57.871971 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 12:57:57.871967165 +0000 UTC m=+404.586891014 I0505 12:57:57.872120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:57:57.872135 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 12:57:57.87213266 +0000 UTC m=+404.587056509 I0505 12:57:57.872227 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 12:57:57.872224072 +0000 UTC m=+404.587147921 I0505 12:57:57.874325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:57:57.874369 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 12:57:57.874359432 +0000 UTC m=+404.589283301 I0505 12:57:57.874737 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 12:57:57.874718502 +0000 UTC m=+404.589642371 I0505 12:57:57.904418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:57.904458 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 12:57:57.90445326 +0000 UTC m=+404.619377099 I0505 12:57:57.906259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:57.906312 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 12:57:57.906308791 +0000 UTC m=+404.621232630 I0505 12:57:57.909247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:57.909306 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:57:57.909324 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 12:57:57.909320635 +0000 UTC m=+404.624244474 I0505 12:57:58.023547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:58.054786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:58.061392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jvp6z" condition "Approved" to 2026-05-05 12:57:58.06138152 +0000 UTC m=+404.776305369 I0505 12:57:58.063412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:58.073038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-68g4s" condition "Approved" to 2026-05-05 12:57:58.073028924 +0000 UTC m=+404.787952763 I0505 12:57:58.082850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jvp6z" condition "Ready" to 2026-05-05 12:57:58.082837727 +0000 UTC m=+404.797761576 I0505 12:57:58.087456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-68g4s" condition "Ready" to 2026-05-05 12:57:58.087450606 +0000 UTC m=+404.802374435 I0505 12:57:58.088417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hvv62" condition "Approved" to 2026-05-05 12:57:58.088406452 +0000 UTC m=+404.803330301 I0505 12:57:58.319164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hvv62" condition "Ready" to 2026-05-05 12:57:58.319153018 +0000 UTC m=+405.034076867 I0505 12:57:58.410532 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:57:58.410519462 +0000 UTC m=+405.125443311 I0505 12:57:58.460244 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:57:58.460225416 +0000 UTC m=+405.175149265 I0505 12:57:58.712750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:58.814238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:58.814637 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:57:58.814629735 +0000 UTC m=+405.529553584 I0505 12:57:58.862152 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:57:58.862136548 +0000 UTC m=+405.577060397 I0505 12:57:59.166513 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:57:59.166502405 +0000 UTC m=+405.881426254 I0505 12:57:59.212122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:59.361815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:59.412256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:57:59.861917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:05.838259 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" condition "Ready" to 2026-05-05 12:58:05.838241605 +0000 UTC m=+412.553165474 I0505 12:58:05.838604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:58:05.838654 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" condition "Issuing" to 2026-05-05 12:58:05.838644957 +0000 UTC m=+412.553569076 I0505 12:58:05.854607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8z76b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:05.854871 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" condition "Ready" to 2026-05-05 12:58:05.854857088 +0000 UTC m=+412.569780967 I0505 12:58:06.122279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8z76b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:06.148884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8z76b-wdpps" condition "Approved" to 2026-05-05 12:58:06.148874245 +0000 UTC m=+412.863798094 I0505 12:58:06.169955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8z76b-wdpps" condition "Ready" to 2026-05-05 12:58:06.169946622 +0000 UTC m=+412.884870461 I0505 12:58:06.196380 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:58:06.196368507 +0000 UTC m=+412.911292356 I0505 12:58:06.216286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8z76b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:06.216592 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:58:06.216587521 +0000 UTC m=+412.931511360 I0505 12:58:06.239564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8z76b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:06.248147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8z76b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8z76b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:26.279429 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 12:58:26.279491 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 12:58:26.279478426 +0000 UTC m=+432.994402295 I0505 12:58:26.279492 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 12:58:26.279471536 +0000 UTC m=+432.994395415 I0505 12:58:26.296949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:26.297010 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 12:58:26.297003806 +0000 UTC m=+433.011927645 I0505 12:58:26.378223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:26.408812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fjrcp" condition "Approved" to 2026-05-05 12:58:26.408795621 +0000 UTC m=+433.123719500 I0505 12:58:26.428068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fjrcp" condition "Ready" to 2026-05-05 12:58:26.428057768 +0000 UTC m=+433.142981607 I0505 12:58:26.456031 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:58:26.45601858 +0000 UTC m=+433.170942419 I0505 12:58:26.481846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:26.482110 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 12:58:26.48210327 +0000 UTC m=+433.197027109 I0505 12:58:26.491427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 12:58:26.508478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:01:43.966530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:01:43.966574 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 13:01:43.966557842 +0000 UTC m=+630.681481721 I0505 13:01:43.966592 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 13:01:43.966584973 +0000 UTC m=+630.681508832 I0505 13:01:43.981877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:01:43.981934 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 13:01:43.981928381 +0000 UTC m=+630.696852230 I0505 13:01:44.209869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:01:44.237204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2brkv" condition "Approved" to 2026-05-05 13:01:44.237184269 +0000 UTC m=+630.952108138 I0505 13:01:44.258664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2brkv" condition "Ready" to 2026-05-05 13:01:44.258654219 +0000 UTC m=+630.973578058 I0505 13:01:44.293057 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:01:44.293045941 +0000 UTC m=+631.007969780 I0505 13:01:44.311680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:01:44.359336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:04:06.154914 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:04:06.155018 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 13:04:06.15500708 +0000 UTC m=+772.869930929 I0505 13:04:06.155647 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 13:04:06.155624278 +0000 UTC m=+772.870548127 I0505 13:04:06.172621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:04:06.172711 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 13:04:06.172704128 +0000 UTC m=+772.887627977 I0505 13:04:06.287828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:04:06.320387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mrv89" condition "Approved" to 2026-05-05 13:04:06.320377216 +0000 UTC m=+773.035301055 I0505 13:04:06.340209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mrv89" condition "Ready" to 2026-05-05 13:04:06.340198394 +0000 UTC m=+773.055122243 I0505 13:04:06.388347 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:04:06.388338046 +0000 UTC m=+773.103261885 I0505 13:04:06.412012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:04:06.412789 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:04:06.412782233 +0000 UTC m=+773.127706082 I0505 13:04:06.416839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:04:06.429726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:04:06.430044 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:04:06.430036508 +0000 UTC m=+773.144960347 I0505 13:05:05.574908 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 13:05:05.574893665 +0000 UTC m=+832.289817544 I0505 13:05:05.575250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:05:05.575361 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-05 13:05:05.575348568 +0000 UTC m=+832.290272447 I0505 13:05:05.590255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:05:05.590386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:05:05.590424 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-05 13:05:05.590417283 +0000 UTC m=+832.305341132 I0505 13:05:05.792438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:05:05.796250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6ps8d" condition "Approved" to 2026-05-05 13:05:05.796243198 +0000 UTC m=+832.511167047 I0505 13:05:05.815723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6ps8d" condition "Ready" to 2026-05-05 13:05:05.815713066 +0000 UTC m=+832.530636925 I0505 13:05:05.843721 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:05:05.843707604 +0000 UTC m=+832.558631453 I0505 13:05:05.866533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:05:05.866817 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:05:05.866809085 +0000 UTC m=+832.581732954 I0505 13:05:05.884849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:07:58.259824 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-05 13:07:58.259811094 +0000 UTC m=+1004.974734933 I0505 13:07:58.260138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:07:58.260264 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 13:07:58.260251246 +0000 UTC m=+1004.975175125 I0505 13:07:58.276967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:07:58.277203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:07:58.277273 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 13:07:58.277262957 +0000 UTC m=+1004.992186836 I0505 13:07:58.532764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pd2v8" condition "Approved" to 2026-05-05 13:07:58.532752641 +0000 UTC m=+1005.247676480 I0505 13:07:58.549450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pd2v8" condition "Ready" to 2026-05-05 13:07:58.549436012 +0000 UTC m=+1005.264359851 I0505 13:07:58.577363 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:07:58.57734758 +0000 UTC m=+1005.292271429 I0505 13:07:58.595939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:07:58.596350 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:07:58.596342737 +0000 UTC m=+1005.311266586 I0505 13:07:58.617474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:14:11.446007 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 13:14:11.445988068 +0000 UTC m=+1378.160911937 I0505 13:14:11.446020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:14:11.446125 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 13:14:11.446115662 +0000 UTC m=+1378.161039531 I0505 13:14:11.463135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:14:11.463273 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 13:14:11.463265606 +0000 UTC m=+1378.178189455 I0505 13:14:11.614248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:14:11.659044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-hxl8k" condition "Approved" to 2026-05-05 13:14:11.659031221 +0000 UTC m=+1378.373955070 I0505 13:14:11.674094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-hxl8k" condition "Ready" to 2026-05-05 13:14:11.674083506 +0000 UTC m=+1378.389007355 I0505 13:14:11.706704 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:14:11.706693006 +0000 UTC m=+1378.421616855 I0505 13:14:11.735610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:14:11.789487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:15:49.817675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:15:49.817704 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 13:15:49.817687593 +0000 UTC m=+1476.532611492 I0505 13:15:49.817721 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 13:15:49.817713684 +0000 UTC m=+1476.532637563 I0505 13:15:49.843119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:15:49.843205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 13:15:49.843250 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 13:15:49.843238515 +0000 UTC m=+1476.558162364 I0505 13:15:49.996342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-5zfkv" condition "Approved" to 2026-05-05 13:15:49.996328271 +0000 UTC m=+1476.711252120 I0505 13:15:50.013936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-5zfkv" condition "Ready" to 2026-05-05 13:15:50.013924428 +0000 UTC m=+1476.728848267 I0505 13:15:50.063006 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 13:15:50.062989664 +0000 UTC m=+1476.777913513 I0505 13:15:50.093043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 13:15:50.178390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"