I0417 15:11:49.471015 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 15:11:49.471184 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 15:11:49.471277 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 15:11:49.478080 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 15:11:49.479165 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 15:11:49.479249 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 15:11:49.479215 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 15:11:49.483372 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 15:11:49.498975 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 15:11:49.504447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 15:11:49.507566 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 15:11:49.507599 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 15:11:49.507668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 15:11:49.514701 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 15:11:49.514860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 15:11:49.518701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 15:11:49.521580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 15:11:49.523460 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 15:11:49.525226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 15:11:49.527216 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 15:11:49.530223 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 15:11:49.533367 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 15:11:49.535109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 15:11:49.537261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 15:11:49.538946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 15:11:49.540889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 15:11:49.542429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 15:11:49.542451 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 15:11:49.542457 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 15:11:49.542496 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 15:11:49.544399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 15:11:49.546405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 15:11:49.551114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 15:11:49.554850 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.555310 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.555506 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.555734 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.555978 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.556095 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.556667 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.556741 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.556945 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:49.641200 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 15:11:59.617664 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 15:11:59.617644326 +0000 UTC m=+10.179134912 I0417 15:12:00.334991 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 15:12:00.334964704 +0000 UTC m=+10.896455290 I0417 15:12:00.335207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:12:00.335288 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 15:12:00.335275072 +0000 UTC m=+10.896765648 E0417 15:12:00.352104 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 15:12:00.352164 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 15:12:00.352152277 +0000 UTC m=+10.913642823 E0417 15:12:00.352210 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 15:12:00.353322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:00.353502 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 15:12:00.353485623 +0000 UTC m=+10.914976199 E0417 15:12:00.361219 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 15:12:00.361347 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 15:12:00.361390 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 15:12:00.361436 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 15:12:00.368389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:00.388560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bwhxh" condition "Approved" to 2026-04-17 15:12:00.388541197 +0000 UTC m=+10.950031783 I0417 15:12:00.406378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bwhxh" condition "Ready" to 2026-04-17 15:12:00.406369047 +0000 UTC m=+10.967859583 I0417 15:12:00.433307 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:12:00.433298493 +0000 UTC m=+10.994789049 I0417 15:12:00.451995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:00.490803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:05.361899 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:12:05.361872096 +0000 UTC m=+15.923362682 I0417 15:12:26.293248 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 15:12:26.293224257 +0000 UTC m=+36.854714843 I0417 15:12:26.293282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:12:26.293341 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 15:12:26.293328079 +0000 UTC m=+36.854818665 I0417 15:12:26.307171 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 15:12:26.307159262 +0000 UTC m=+36.868649808 I0417 15:12:26.322629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:26.322738 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 15:12:26.322729881 +0000 UTC m=+36.884220427 I0417 15:12:26.511996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:26.548542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6vffl" condition "Approved" to 2026-04-17 15:12:26.548527103 +0000 UTC m=+37.110017679 I0417 15:12:26.582821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6vffl" condition "Ready" to 2026-04-17 15:12:26.582800066 +0000 UTC m=+37.144290632 I0417 15:12:26.624925 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:12:26.624908991 +0000 UTC m=+37.186399567 I0417 15:12:26.646301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:26.646770 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:12:26.646759879 +0000 UTC m=+37.208250435 I0417 15:12:26.656371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:26.668429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:12:26.668795 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:12:26.668785832 +0000 UTC m=+37.230276388 I0417 15:14:13.625864 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 15:14:13.625814466 +0000 UTC m=+144.187305052 I0417 15:14:13.625882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:14:13.626061 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 15:14:13.626046882 +0000 UTC m=+144.187537468 E0417 15:14:13.639728 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 15:14:13.639808 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 15:14:13.639803132 +0000 UTC m=+144.201293688 I0417 15:14:13.639847 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 15:14:13.649539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:14:13.649690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:14:13.649724 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 15:14:13.649715719 +0000 UTC m=+144.211206285 E0417 15:14:13.655181 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0417 15:14:13.655256 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 15:14:13.655297 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 15:14:13.655329 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0417 15:14:13.656472 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 15:14:13.65645214 +0000 UTC m=+144.217942696 I0417 15:14:13.656538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:14:13.656596 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 15:14:13.656581674 +0000 UTC m=+144.218072260 I0417 15:14:13.671137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:14:13.671219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:14:13.671237 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 15:14:13.671229888 +0000 UTC m=+144.232720444 I0417 15:14:14.060960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dkdvc" condition "Approved" to 2026-04-17 15:14:14.060941638 +0000 UTC m=+144.622432214 I0417 15:14:14.083839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dkdvc" condition "Ready" to 2026-04-17 15:14:14.083824344 +0000 UTC m=+144.645314930 I0417 15:14:14.224520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-j8twk" condition "Approved" to 2026-04-17 15:14:14.224506821 +0000 UTC m=+144.785997377 I0417 15:14:14.255955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-j8twk" condition "Ready" to 2026-04-17 15:14:14.255938047 +0000 UTC m=+144.817428623 I0417 15:14:14.283192 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:14:14.28317157 +0000 UTC m=+144.844662126 I0417 15:14:14.308939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:14:14.309305 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:14:14.309298623 +0000 UTC m=+144.870789179 I0417 15:14:14.324670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:14:14.324957 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:14:14.324946405 +0000 UTC m=+144.886436961 I0417 15:14:14.331388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:14:18.656425 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:14:18.656411437 +0000 UTC m=+149.217902013 I0417 15:14:18.673701 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-dkdvc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:14:18.673679222 +0000 UTC m=+149.235169798 I0417 15:14:18.704374 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:14:18.704360998 +0000 UTC m=+149.265851554 I0417 15:14:18.722565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:14:18.722959 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:14:18.722953208 +0000 UTC m=+149.284443754 I0417 15:14:18.740631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:16:45.315263 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-04-17 15:16:45.315218073 +0000 UTC m=+295.876708659 I0417 15:16:45.315855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:16:45.315886 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-04-17 15:16:45.315880041 +0000 UTC m=+295.877370627 I0417 15:16:45.329758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:16:45.329827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:16:45.329853 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-04-17 15:16:45.329845642 +0000 UTC m=+295.891336228 I0417 15:16:45.569323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:16:45.576553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-lfvbh" condition "Approved" to 2026-04-17 15:16:45.576530148 +0000 UTC m=+296.138020744 I0417 15:16:45.596735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-lfvbh" condition "Ready" to 2026-04-17 15:16:45.596719838 +0000 UTC m=+296.158210414 I0417 15:16:45.620460 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:16:45.620443065 +0000 UTC m=+296.181933651 I0417 15:16:45.639178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:17:55.200170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:17:55.200298 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 15:17:55.200285082 +0000 UTC m=+365.761775668 I0417 15:17:55.200187 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 15:17:55.200164739 +0000 UTC m=+365.761655325 E0417 15:17:55.212417 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 15:17:55.212468 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 15:17:55.212453474 +0000 UTC m=+365.773944060 E0417 15:17:55.212528 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 15:17:55.214139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:17:55.214201 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 15:17:55.214192561 +0000 UTC m=+365.775683117 E0417 15:17:55.225489 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 15:17:55.225587 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 15:17:55.225611 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 15:17:55.225654 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 15:17:55.231013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:17:55.254457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lkmd5" condition "Approved" to 2026-04-17 15:17:55.254437969 +0000 UTC m=+365.815928555 I0417 15:17:55.266885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lkmd5" condition "Ready" to 2026-04-17 15:17:55.266875588 +0000 UTC m=+365.828366144 I0417 15:17:55.287201 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:17:55.287185162 +0000 UTC m=+365.848675718 I0417 15:17:55.306476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:17:55.306796 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:17:55.306788176 +0000 UTC m=+365.868278732 I0417 15:17:55.321408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:17:55.321663 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:17:55.321655981 +0000 UTC m=+365.883146537 I0417 15:18:00.226889 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:18:00.226875446 +0000 UTC m=+370.788366022 I0417 15:18:37.686159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:18:37.686287 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 15:18:37.686275239 +0000 UTC m=+408.247765815 I0417 15:18:37.686716 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 15:18:37.686711341 +0000 UTC m=+408.248201887 I0417 15:18:37.687207 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 15:18:37.687202384 +0000 UTC m=+408.248692930 I0417 15:18:37.687356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:18:37.687379 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 15:18:37.687376709 +0000 UTC m=+408.248867255 I0417 15:18:37.688509 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 15:18:37.68850515 +0000 UTC m=+408.249995696 I0417 15:18:37.688802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:18:37.689407 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 15:18:37.689390084 +0000 UTC m=+408.250880730 I0417 15:18:37.723719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:37.724018 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 15:18:37.723984107 +0000 UTC m=+408.285474663 I0417 15:18:37.730147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:37.730556 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 15:18:37.730550986 +0000 UTC m=+408.292041542 I0417 15:18:37.730476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:37.731426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:18:37.731501 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 15:18:37.731495722 +0000 UTC m=+408.292986268 I0417 15:18:37.873999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2vf7q" condition "Approved" to 2026-04-17 15:18:37.873979877 +0000 UTC m=+408.435470453 I0417 15:18:37.899387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2vf7q" condition "Ready" to 2026-04-17 15:18:37.899375039 +0000 UTC m=+408.460865615 I0417 15:18:37.929801 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:18:37.929789359 +0000 UTC m=+408.491279915 I0417 15:18:37.986425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:37.986985 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:18:37.986973798 +0000 UTC m=+408.548464364 I0417 15:18:38.006096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:38.024101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0417 15:18:38.027812 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-pxsdp\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0417 15:18:38.043774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-grl2m" condition "Approved" to 2026-04-17 15:18:38.043762926 +0000 UTC m=+408.605253472 I0417 15:18:38.061155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-grl2m" condition "Ready" to 2026-04-17 15:18:38.06114155 +0000 UTC m=+408.622632116 I0417 15:18:38.091163 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:18:38.091146738 +0000 UTC m=+408.652637284 I0417 15:18:38.134230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:38.134689 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:18:38.134680615 +0000 UTC m=+408.696171171 I0417 15:18:38.382051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:38.482918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:38.638046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zzv9p" condition "Approved" to 2026-04-17 15:18:38.63803271 +0000 UTC m=+409.199523256 I0417 15:18:38.740252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zzv9p" condition "Ready" to 2026-04-17 15:18:38.740237396 +0000 UTC m=+409.301727982 I0417 15:18:39.183082 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:18:39.18306347 +0000 UTC m=+409.744554046 I0417 15:18:39.282486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:39.282824 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:18:39.28281699 +0000 UTC m=+409.844307546 I0417 15:18:39.531815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:39.580508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:45.533938 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" condition "Ready" to 2026-04-17 15:18:45.53392425 +0000 UTC m=+416.095414806 I0417 15:18:45.533950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:18:45.534238 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" condition "Issuing" to 2026-04-17 15:18:45.534127916 +0000 UTC m=+416.095618502 I0417 15:18:45.548729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:45.548876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:18:45.548903 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" condition "Issuing" to 2026-04-17 15:18:45.548896159 +0000 UTC m=+416.110386705 I0417 15:18:45.711905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s9d9d-h2g5l" condition "Approved" to 2026-04-17 15:18:45.711876892 +0000 UTC m=+416.273367468 I0417 15:18:45.736302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s9d9d-h2g5l" condition "Ready" to 2026-04-17 15:18:45.736288618 +0000 UTC m=+416.297779174 I0417 15:18:45.769287 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:18:45.769270377 +0000 UTC m=+416.330760933 I0417 15:18:45.787470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:18:45.831759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s9d9d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:19:12.919693 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 15:19:12.91967436 +0000 UTC m=+443.481164946 I0417 15:19:12.919802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:19:12.919836 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 15:19:12.919828194 +0000 UTC m=+443.481318780 I0417 15:19:12.944576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:19:12.944691 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 15:19:12.944677941 +0000 UTC m=+443.506168527 I0417 15:19:13.219986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:19:13.246424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pgsk6" condition "Approved" to 2026-04-17 15:19:13.246410158 +0000 UTC m=+443.807900714 I0417 15:19:13.264271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pgsk6" condition "Ready" to 2026-04-17 15:19:13.264256545 +0000 UTC m=+443.825747131 I0417 15:19:13.290760 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:19:13.290748477 +0000 UTC m=+443.852239033 I0417 15:19:13.317983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:19:13.318299 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:19:13.318293698 +0000 UTC m=+443.879784254 I0417 15:19:13.319937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:19:13.335757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:19:13.336065 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:19:13.336058743 +0000 UTC m=+443.897549289 I0417 15:22:29.789629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:22:29.789684 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 15:22:29.789677084 +0000 UTC m=+640.351167640 I0417 15:22:29.789640 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 15:22:29.789601852 +0000 UTC m=+640.351092498 I0417 15:22:29.848990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:22:29.849077 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 15:22:29.849071559 +0000 UTC m=+640.410562125 I0417 15:22:30.163642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:22:30.204911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r8nlb" condition "Approved" to 2026-04-17 15:22:30.204896926 +0000 UTC m=+640.766387482 I0417 15:22:30.235207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r8nlb" condition "Ready" to 2026-04-17 15:22:30.235195795 +0000 UTC m=+640.796686351 I0417 15:22:30.267160 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:22:30.267147129 +0000 UTC m=+640.828637685 I0417 15:22:30.288763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:22:30.289285 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:22:30.289277997 +0000 UTC m=+640.850768553 I0417 15:22:30.302689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:22:30.316861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:22:30.317147 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:22:30.3171394 +0000 UTC m=+640.878629946 I0417 15:22:30.317395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:25:01.083141 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 15:25:01.083128437 +0000 UTC m=+791.644618983 I0417 15:25:01.083505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:25:01.083547 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 15:25:01.083543788 +0000 UTC m=+791.645034334 I0417 15:25:01.098905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:25:01.099050 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 15:25:01.099039878 +0000 UTC m=+791.660530434 I0417 15:25:01.335295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:25:01.365723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-56ccm" condition "Approved" to 2026-04-17 15:25:01.365711322 +0000 UTC m=+791.927201878 I0417 15:25:01.391133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-56ccm" condition "Ready" to 2026-04-17 15:25:01.391117061 +0000 UTC m=+791.952607647 I0417 15:25:01.418293 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:25:01.418279817 +0000 UTC m=+791.979770373 I0417 15:25:01.434507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:25:01.435012 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:25:01.434984269 +0000 UTC m=+791.996474825 I0417 15:25:01.454000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:26:08.940507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:26:08.940593 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 15:26:08.940582987 +0000 UTC m=+859.502073553 I0417 15:26:08.940846 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 15:26:08.940823123 +0000 UTC m=+859.502313699 I0417 15:26:08.954633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:26:08.954738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:26:08.954769 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 15:26:08.954760261 +0000 UTC m=+859.516250817 I0417 15:26:09.147856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:26:09.158708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-lg47q" condition "Approved" to 2026-04-17 15:26:09.158696596 +0000 UTC m=+859.720187142 I0417 15:26:09.181023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-lg47q" condition "Ready" to 2026-04-17 15:26:09.18101248 +0000 UTC m=+859.742503066 I0417 15:26:09.230680 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:26:09.230659646 +0000 UTC m=+859.792150232 I0417 15:26:09.257793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:26:09.260485 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:26:09.260473573 +0000 UTC m=+859.821964119 I0417 15:26:09.268768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:26:09.287542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:29:11.460938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 15:29:11.461413 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 15:29:11.461017518 +0000 UTC m=+1042.022508094 I0417 15:29:11.461414 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 15:29:11.46073147 +0000 UTC m=+1042.022222046 I0417 15:29:11.481418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:29:11.481520 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 15:29:11.481511722 +0000 UTC m=+1042.043002278 I0417 15:29:11.698152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:29:11.731171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-5mcjx" condition "Approved" to 2026-04-17 15:29:11.73115669 +0000 UTC m=+1042.292647276 I0417 15:29:11.750143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-5mcjx" condition "Ready" to 2026-04-17 15:29:11.750131224 +0000 UTC m=+1042.311621780 I0417 15:29:11.777788 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:29:11.777776963 +0000 UTC m=+1042.339267519 I0417 15:29:11.796223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:29:11.796694 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 15:29:11.796680754 +0000 UTC m=+1042.358171310 I0417 15:29:11.803867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 15:29:11.818515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"