I0413 01:30:39.236413 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 01:30:39.236616 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 01:30:39.236732 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 01:30:39.244879 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 01:30:39.245605 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 01:30:39.245750 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 01:30:39.245769 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 01:30:39.249202 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 01:30:39.264977 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 01:30:39.269807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 01:30:39.273198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 01:30:39.279177 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 01:30:39.283528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 01:30:39.285528 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 01:30:39.285586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 01:30:39.287457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 01:30:39.289340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 01:30:39.291063 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 01:30:39.291092 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 01:30:39.291117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 01:30:39.292969 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 01:30:39.293507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 01:30:39.299275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 01:30:39.303471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 01:30:39.306019 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 01:30:39.306134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 01:30:39.308279 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 01:30:39.310669 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 01:30:39.312730 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 01:30:39.312798 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 01:30:39.314733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 01:30:39.316535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 01:30:39.322223 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 01:30:39.324595 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.325570 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.325959 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.326567 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.326774 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.326897 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.327258 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.327262 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.327450 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:39.415503 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 01:30:57.324236 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 01:30:57.324218871 +0000 UTC m=+18.122444174 I0413 01:30:58.014053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:30:58.014090 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 01:30:58.014075813 +0000 UTC m=+18.812301116 I0413 01:30:58.014149 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 01:30:58.014138764 +0000 UTC m=+18.812364067 E0413 01:30:58.030827 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 01:30:58.030992 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 01:30:58.030967823 +0000 UTC m=+18.829193106 E0413 01:30:58.031052 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 01:30:58.031292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:30:58.031372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:30:58.031394 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 01:30:58.031385582 +0000 UTC m=+18.829610875 E0413 01:30:58.046669 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 01:30:58.047358 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 01:30:58.047452 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 01:30:58.047507 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 01:30:58.070010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mpc9d" condition "Approved" to 2026-04-13 01:30:58.069993821 +0000 UTC m=+18.868219104 I0413 01:30:58.083143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mpc9d" condition "Ready" to 2026-04-13 01:30:58.083128517 +0000 UTC m=+18.881353790 I0413 01:30:58.107323 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:30:58.107311042 +0000 UTC m=+18.905536355 I0413 01:30:58.132836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:31:03.047327 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:31:03.047312149 +0000 UTC m=+23.845537452 I0413 01:31:24.309040 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 01:31:24.30902611 +0000 UTC m=+45.107251393 I0413 01:31:24.309375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:31:24.309408 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 01:31:24.309402589 +0000 UTC m=+45.107627872 I0413 01:31:24.323455 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 01:31:24.323444505 +0000 UTC m=+45.121669778 I0413 01:31:24.330395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:31:24.330466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:31:24.330496 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 01:31:24.330482284 +0000 UTC m=+45.128707567 I0413 01:31:24.648013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8f28d" condition "Approved" to 2026-04-13 01:31:24.647812828 +0000 UTC m=+45.446038141 I0413 01:31:24.682093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8f28d" condition "Ready" to 2026-04-13 01:31:24.682073049 +0000 UTC m=+45.480298322 I0413 01:31:24.714589 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:31:24.714570931 +0000 UTC m=+45.512796244 I0413 01:31:24.735714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:31:24.789114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:32:58.578369 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-13 01:32:58.578319387 +0000 UTC m=+139.376544710 I0413 01:32:58.578403 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:32:58.578451 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 01:32:58.57844037 +0000 UTC m=+139.376665683 E0413 01:32:58.591331 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 01:32:58.591404 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-13 01:32:58.591394962 +0000 UTC m=+139.389620275 I0413 01:32:58.591474 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 01:32:58.593884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:32:58.594068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:32:58.594097 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 01:32:58.594089244 +0000 UTC m=+139.392314527 E0413 01:32:58.600848 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0413 01:32:58.600973 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 01:32:58.601023 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0413 01:32:58.601064 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0413 01:32:58.608164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:32:58.608229 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-13 01:32:58.608217033 +0000 UTC m=+139.406442346 I0413 01:32:58.608256 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 01:32:58.608200563 +0000 UTC m=+139.406425876 I0413 01:32:58.622815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:32:58.623071 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-13 01:32:58.623061728 +0000 UTC m=+139.421287001 I0413 01:32:58.850504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:32:58.877844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zw82j" condition "Approved" to 2026-04-13 01:32:58.877822036 +0000 UTC m=+139.676047359 I0413 01:32:58.895394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zw82j" condition "Ready" to 2026-04-13 01:32:58.895374934 +0000 UTC m=+139.693600207 I0413 01:32:59.124067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-29xpw" condition "Approved" to 2026-04-13 01:32:59.124053975 +0000 UTC m=+139.922279258 I0413 01:32:59.148085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-29xpw" condition "Ready" to 2026-04-13 01:32:59.148068583 +0000 UTC m=+139.946293896 I0413 01:32:59.178787 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:32:59.178770207 +0000 UTC m=+139.976995510 I0413 01:32:59.197434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:32:59.197813 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:32:59.19780629 +0000 UTC m=+139.996031563 I0413 01:32:59.206971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:32:59.212451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:32:59.212841 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:32:59.21283063 +0000 UTC m=+140.011055943 I0413 01:33:03.602326 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:33:03.602308658 +0000 UTC m=+144.400533961 I0413 01:33:03.625028 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-zw82j" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:33:03.625010972 +0000 UTC m=+144.423236255 I0413 01:33:03.657417 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:33:03.6574001 +0000 UTC m=+144.455625403 I0413 01:33:03.679016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:33:03.679454 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:33:03.679443829 +0000 UTC m=+144.477669112 I0413 01:33:03.697367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:33:03.697776 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:33:03.697765122 +0000 UTC m=+144.495990405 I0413 01:33:03.697874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:35:26.366285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:35:26.366311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-04-13 01:35:26.366294524 +0000 UTC m=+287.164519827 I0413 01:35:26.366382 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-04-13 01:35:26.366370346 +0000 UTC m=+287.164595649 I0413 01:35:26.387223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:35:26.387305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:35:26.387327 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-04-13 01:35:26.387317493 +0000 UTC m=+287.185542796 I0413 01:35:26.522697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-qtb28" condition "Approved" to 2026-04-13 01:35:26.52268138 +0000 UTC m=+287.320906683 I0413 01:35:26.542277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-qtb28" condition "Ready" to 2026-04-13 01:35:26.542266536 +0000 UTC m=+287.340491819 I0413 01:35:26.568978 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:35:26.568963026 +0000 UTC m=+287.367188329 I0413 01:35:26.590370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:35:26.590777 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:35:26.590771193 +0000 UTC m=+287.388996476 I0413 01:35:26.593833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:35:26.611742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:35:26.613260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:35:26.613675 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:35:26.613662435 +0000 UTC m=+287.411887708 I0413 01:36:37.064680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:36:37.064743 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 01:36:37.064697826 +0000 UTC m=+357.862923129 I0413 01:36:37.064800 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 01:36:37.064725677 +0000 UTC m=+357.862950960 E0413 01:36:37.080209 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 01:36:37.080259 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 01:36:37.080251519 +0000 UTC m=+357.878476792 E0413 01:36:37.080350 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 01:36:37.082858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:36:37.082936 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 01:36:37.082925692 +0000 UTC m=+357.881150975 E0413 01:36:37.090786 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 01:36:37.090887 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 01:36:37.090923 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 01:36:37.090959 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 01:36:37.098110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:36:37.098202 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 01:36:37.098188049 +0000 UTC m=+357.896413362 I0413 01:36:37.101389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q7tw8" condition "Approved" to 2026-04-13 01:36:37.101375873 +0000 UTC m=+357.899601186 I0413 01:36:37.114696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q7tw8" condition "Ready" to 2026-04-13 01:36:37.114683894 +0000 UTC m=+357.912909197 I0413 01:36:37.139137 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:36:37.139115065 +0000 UTC m=+357.937340368 I0413 01:36:37.158306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:36:37.203432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:36:42.091244 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:36:42.091231292 +0000 UTC m=+362.889456595 I0413 01:37:20.427765 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 01:37:20.427747414 +0000 UTC m=+401.225972747 I0413 01:37:20.427930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:37:20.427967 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 01:37:20.427958709 +0000 UTC m=+401.226183982 I0413 01:37:20.434786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:37:20.434823 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 01:37:20.43481487 +0000 UTC m=+401.233040133 I0413 01:37:20.435237 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 01:37:20.435225259 +0000 UTC m=+401.233450532 I0413 01:37:20.435568 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 01:37:20.435562657 +0000 UTC m=+401.233787940 I0413 01:37:20.435762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:37:20.435781 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 01:37:20.435777372 +0000 UTC m=+401.234002655 I0413 01:37:20.464775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:20.464797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:20.464952 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 01:37:20.464876722 +0000 UTC m=+401.263102015 I0413 01:37:20.465177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:37:20.465241 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 01:37:20.465232301 +0000 UTC m=+401.263457604 I0413 01:37:20.466627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:20.466739 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 01:37:20.466725316 +0000 UTC m=+401.264950619 I0413 01:37:20.611395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:20.643604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fzgd7" condition "Approved" to 2026-04-13 01:37:20.643591199 +0000 UTC m=+401.441816482 I0413 01:37:20.669828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fzgd7" condition "Ready" to 2026-04-13 01:37:20.669814232 +0000 UTC m=+401.468039515 I0413 01:37:20.712364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:20.722622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rjgbp" condition "Approved" to 2026-04-13 01:37:20.722610055 +0000 UTC m=+401.520835338 I0413 01:37:20.731280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:37:20.731586 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 01:37:20.731577775 +0000 UTC m=+401.529803068 I0413 01:37:20.735607 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:20.735598069 +0000 UTC m=+401.533823352 I0413 01:37:20.764727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rjgbp" condition "Ready" to 2026-04-13 01:37:20.764712239 +0000 UTC m=+401.562937552 I0413 01:37:20.772518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:20.772754 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:20.772746177 +0000 UTC m=+401.570971460 I0413 01:37:20.790369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:20.817307 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:20.817293978 +0000 UTC m=+401.615519241 I0413 01:37:21.016916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:21.017629 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:21.017618409 +0000 UTC m=+401.815843712 I0413 01:37:21.066629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:21.171656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5hx6v" condition "Approved" to 2026-04-13 01:37:21.171640659 +0000 UTC m=+401.969865942 I0413 01:37:21.525628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5hx6v" condition "Ready" to 2026-04-13 01:37:21.525617801 +0000 UTC m=+402.323843064 I0413 01:37:21.820674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:21.876495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lzjj8" condition "Approved" to 2026-04-13 01:37:21.876474859 +0000 UTC m=+402.674700172 I0413 01:37:22.381071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lzjj8" condition "Ready" to 2026-04-13 01:37:22.381050311 +0000 UTC m=+403.179275624 I0413 01:37:22.671962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:22.793588 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:22.793572523 +0000 UTC m=+403.591797806 I0413 01:37:23.017189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:23.017635 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:23.017625369 +0000 UTC m=+403.815850672 I0413 01:37:23.068884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:23.318431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:28.103219 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls" condition "Ready" to 2026-04-13 01:37:28.103200573 +0000 UTC m=+408.901425876 I0413 01:37:28.103336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:37:28.103398 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls" condition "Issuing" to 2026-04-13 01:37:28.103385808 +0000 UTC m=+408.901611131 I0413 01:37:28.118018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:28.118079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:37:28.118094 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls" condition "Issuing" to 2026-04-13 01:37:28.118089531 +0000 UTC m=+408.916314794 I0413 01:37:28.597070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vx5dr-jbhlz" condition "Approved" to 2026-04-13 01:37:28.597055981 +0000 UTC m=+409.395281264 I0413 01:37:28.616788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vx5dr-jbhlz" condition "Ready" to 2026-04-13 01:37:28.616776221 +0000 UTC m=+409.415001494 I0413 01:37:28.651295 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:28.651273296 +0000 UTC m=+409.449498609 I0413 01:37:28.680438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vx5dr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:56.233588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:37:56.233613 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 01:37:56.233591954 +0000 UTC m=+437.031817257 I0413 01:37:56.233667 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 01:37:56.233635245 +0000 UTC m=+437.031860558 I0413 01:37:56.251933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:56.252027 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 01:37:56.252019123 +0000 UTC m=+437.050244406 I0413 01:37:56.414142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:56.443458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-78wt8" condition "Approved" to 2026-04-13 01:37:56.443440748 +0000 UTC m=+437.241666061 I0413 01:37:56.461490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-78wt8" condition "Ready" to 2026-04-13 01:37:56.461478489 +0000 UTC m=+437.259703772 I0413 01:37:56.488047 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:56.488033998 +0000 UTC m=+437.286259281 I0413 01:37:56.515572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:56.515876 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:56.515870977 +0000 UTC m=+437.314096250 I0413 01:37:56.544767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:37:56.545138 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:37:56.545126149 +0000 UTC m=+437.343351422 I0413 01:37:56.547355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:41:13.623174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 01:41:13.623153959 +0000 UTC m=+634.421379272 I0413 01:41:13.623248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:41:13.623325 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 01:41:13.623312812 +0000 UTC m=+634.421538125 I0413 01:41:13.641695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:41:13.641779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:41:13.641803 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 01:41:13.641795904 +0000 UTC m=+634.440021207 I0413 01:41:13.749361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rlbbc" condition "Approved" to 2026-04-13 01:41:13.749349486 +0000 UTC m=+634.547574749 I0413 01:41:13.767730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rlbbc" condition "Ready" to 2026-04-13 01:41:13.767720705 +0000 UTC m=+634.565945988 I0413 01:41:13.796242 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:41:13.796223561 +0000 UTC m=+634.594448844 I0413 01:41:13.817558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:41:13.817958 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:41:13.817950328 +0000 UTC m=+634.616175611 I0413 01:41:13.838191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:41:13.838548 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:41:13.838539469 +0000 UTC m=+634.636764752 I0413 01:43:44.812613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:43:44.812672 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-13 01:43:44.81266601 +0000 UTC m=+785.610891293 I0413 01:43:44.812748 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-13 01:43:44.812729321 +0000 UTC m=+785.610954624 I0413 01:43:44.831495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:43:44.831562 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-13 01:43:44.831556474 +0000 UTC m=+785.629781757 I0413 01:43:45.049426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:43:45.079244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-n2p8w" condition "Approved" to 2026-04-13 01:43:45.079226143 +0000 UTC m=+785.877451456 I0413 01:43:45.098268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-n2p8w" condition "Ready" to 2026-04-13 01:43:45.098255841 +0000 UTC m=+785.896481124 I0413 01:43:45.135638 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:43:45.13562226 +0000 UTC m=+785.933847563 I0413 01:43:45.151000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:43:45.151253 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:43:45.151247748 +0000 UTC m=+785.949473021 I0413 01:43:45.171141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:44:50.824255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:44:50.824292 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 01:44:50.824284539 +0000 UTC m=+851.622509822 I0413 01:44:50.824832 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-13 01:44:50.824826302 +0000 UTC m=+851.623051585 I0413 01:44:50.856493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:44:50.856595 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-13 01:44:50.856585099 +0000 UTC m=+851.654810412 I0413 01:44:51.219996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:44:51.252450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-66wrp" condition "Approved" to 2026-04-13 01:44:51.252432025 +0000 UTC m=+852.050657308 I0413 01:44:51.278529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-66wrp" condition "Ready" to 2026-04-13 01:44:51.278516219 +0000 UTC m=+852.076741502 I0413 01:44:51.311987 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:44:51.311970396 +0000 UTC m=+852.110195709 I0413 01:44:51.344810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:44:51.345200 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:44:51.345191558 +0000 UTC m=+852.143416851 I0413 01:44:51.363636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:44:51.364404 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:44:51.36439323 +0000 UTC m=+852.162618513 I0413 01:47:58.324485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:47:58.324560 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-13 01:47:58.324551902 +0000 UTC m=+1039.122777205 I0413 01:47:58.324845 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-13 01:47:58.324825289 +0000 UTC m=+1039.123050612 I0413 01:47:58.340520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:47:58.340641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 01:47:58.340672 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-13 01:47:58.340663511 +0000 UTC m=+1039.138888814 I0413 01:47:58.495261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-s826p" condition "Approved" to 2026-04-13 01:47:58.495243865 +0000 UTC m=+1039.293469138 I0413 01:47:58.513277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-s826p" condition "Ready" to 2026-04-13 01:47:58.513267528 +0000 UTC m=+1039.311492811 I0413 01:47:58.538710 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:47:58.538693406 +0000 UTC m=+1039.336918689 I0413 01:47:58.563498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:47:58.564369 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 01:47:58.564353809 +0000 UTC m=+1039.362579112 I0413 01:47:58.572007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 01:47:58.592547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"