I0408 10:50:43.993952 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 10:50:43.994130 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 10:50:43.994242 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 10:50:44.001397 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 10:50:44.002948 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 10:50:44.003107 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 10:50:44.003224 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 10:50:44.008319 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 10:50:44.021722 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 10:50:44.027659 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 10:50:44.031297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 10:50:44.034025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 10:50:44.041737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 10:50:44.046127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 10:50:44.049065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 10:50:44.051124 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 10:50:44.052802 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 10:50:44.052836 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 10:50:44.052925 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 10:50:44.054727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 10:50:44.056489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 10:50:44.062664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 10:50:44.066526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 10:50:44.069627 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 10:50:44.069654 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 10:50:44.069743 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 10:50:44.071746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 10:50:44.073576 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 10:50:44.073625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 10:50:44.076282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 10:50:44.079749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 10:50:44.082312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 10:50:44.082346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 10:50:44.086547 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.087238 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.088473 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.090685 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.104790 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.119805 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.142223 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.153566 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.174170 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:50:44.182075 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:51:00.488295 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 10:51:00.48821056 +0000 UTC m=+16.525016761 I0408 10:51:01.176096 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:51:01.176082628 +0000 UTC m=+17.212888809 I0408 10:51:01.176337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:01.176438 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 10:51:01.176425668 +0000 UTC m=+17.213231879 E0408 10:51:01.189624 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:51:01.189763 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 10:51:01.18972598 +0000 UTC m=+17.226532191 E0408 10:51:01.189829 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:51:01.195378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:01.195538 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:51:01.195521108 +0000 UTC m=+17.232327319 E0408 10:51:01.203804 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 10:51:01.204067 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:51:01.204171 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:51:01.204361 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 10:51:01.215263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:01.237556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-czwb9" condition "Approved" to 2026-04-08 10:51:01.237541494 +0000 UTC m=+17.274347705 I0408 10:51:01.250553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-czwb9" condition "Ready" to 2026-04-08 10:51:01.250537418 +0000 UTC m=+17.287343629 I0408 10:51:01.277306 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:01.277280648 +0000 UTC m=+17.314086829 I0408 10:51:01.294926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:06.205245 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:06.205225301 +0000 UTC m=+22.242031512 I0408 10:51:26.191240 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 10:51:26.191216132 +0000 UTC m=+42.228022313 I0408 10:51:26.191381 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:26.191498 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 10:51:26.19148697 +0000 UTC m=+42.228293161 I0408 10:51:26.205081 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 10:51:26.20506737 +0000 UTC m=+42.241873541 I0408 10:51:26.225248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:26.225340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:26.225373 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 10:51:26.225364583 +0000 UTC m=+42.262170764 I0408 10:51:26.347812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-579rp" condition "Approved" to 2026-04-08 10:51:26.347794212 +0000 UTC m=+42.384600423 I0408 10:51:26.379840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-579rp" condition "Ready" to 2026-04-08 10:51:26.379828725 +0000 UTC m=+42.416634896 I0408 10:51:26.411457 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:26.411446318 +0000 UTC m=+42.448252489 I0408 10:51:26.432718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:08.226638 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 10:53:08.226604531 +0000 UTC m=+144.263410712 I0408 10:53:08.226766 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:53:08.226854 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 10:53:08.226840457 +0000 UTC m=+144.263646678 E0408 10:53:08.247032 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:53:08.247117 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-08 10:53:08.24710621 +0000 UTC m=+144.283912421 I0408 10:53:08.247180 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:53:08.250593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:08.250677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:53:08.250700 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 10:53:08.250692611 +0000 UTC m=+144.287498792 I0408 10:53:08.261010 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 10:53:08.260995752 +0000 UTC m=+144.297801943 E0408 10:53:08.261089 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0408 10:53:08.261142 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:53:08.261173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:53:08.261223 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 10:53:08.261211918 +0000 UTC m=+144.298018099 I0408 10:53:08.261181 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 10:53:08.261475 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 10:53:08.277951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:08.278052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:53:08.278078 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 10:53:08.278070113 +0000 UTC m=+144.314876294 I0408 10:53:08.660570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:08.672560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-mtm57" condition "Approved" to 2026-04-08 10:53:08.672553363 +0000 UTC m=+144.709359524 I0408 10:53:08.701840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-mtm57" condition "Ready" to 2026-04-08 10:53:08.701829779 +0000 UTC m=+144.738635960 I0408 10:53:08.731489 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:53:08.731474155 +0000 UTC m=+144.768280326 I0408 10:53:08.733039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:08.737742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zqvcv" condition "Approved" to 2026-04-08 10:53:08.737718512 +0000 UTC m=+144.774524693 I0408 10:53:08.755944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:08.756348 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:53:08.756339867 +0000 UTC m=+144.793146038 I0408 10:53:08.757740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zqvcv" condition "Ready" to 2026-04-08 10:53:08.757724086 +0000 UTC m=+144.794530287 I0408 10:53:08.772018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:13.261696 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:53:13.261661414 +0000 UTC m=+149.298467615 I0408 10:53:13.279558 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-zqvcv" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:53:13.279538048 +0000 UTC m=+149.316344249 I0408 10:53:13.316550 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:53:13.316536251 +0000 UTC m=+149.353342422 I0408 10:53:13.336786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:45.865551 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Ready" to 2026-04-08 10:55:45.865502784 +0000 UTC m=+301.902308985 I0408 10:55:45.865587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:45.865625 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Issuing" to 2026-04-08 10:55:45.865616017 +0000 UTC m=+301.902422198 I0408 10:55:45.883713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:45.883778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:45.883796 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Issuing" to 2026-04-08 10:55:45.883790414 +0000 UTC m=+301.920596605 I0408 10:55:46.144197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:46.153100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-240.nip.io-tls-b6rjd" condition "Approved" to 2026-04-08 10:55:46.153084084 +0000 UTC m=+302.189890265 I0408 10:55:46.174728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-240.nip.io-tls-b6rjd" condition "Ready" to 2026-04-08 10:55:46.174714684 +0000 UTC m=+302.211520865 I0408 10:55:46.200922 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:46.20090792 +0000 UTC m=+302.237714101 I0408 10:55:46.220593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:57.135140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:57.135178 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 10:56:57.135169869 +0000 UTC m=+373.171976050 I0408 10:56:57.135233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 10:56:57.13521235 +0000 UTC m=+373.172018551 E0408 10:56:57.147257 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:56:57.147306 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 10:56:57.14729429 +0000 UTC m=+373.184100491 E0408 10:56:57.147368 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:56:57.148749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:57.148837 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 10:56:57.148828543 +0000 UTC m=+373.185634724 E0408 10:56:57.160740 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 10:56:57.160855 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:56:57.160977 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:56:57.161051 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 10:56:57.165374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:57.187454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s5vx8" condition "Approved" to 2026-04-08 10:56:57.187438918 +0000 UTC m=+373.224245099 I0408 10:56:57.201443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s5vx8" condition "Ready" to 2026-04-08 10:56:57.201430711 +0000 UTC m=+373.238236912 I0408 10:56:57.225835 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:57.225817298 +0000 UTC m=+373.262623509 I0408 10:56:57.244464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:57.244778 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:57.244767926 +0000 UTC m=+373.281574127 I0408 10:56:57.263206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:57.264002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:57.264292 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:57.26428399 +0000 UTC m=+373.301090171 I0408 10:57:02.161114 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:02.161102014 +0000 UTC m=+378.197908225 I0408 10:57:39.704406 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:57:39.704471 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 10:57:39.704464336 +0000 UTC m=+415.741270507 I0408 10:57:39.707252 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 10:57:39.707235132 +0000 UTC m=+415.744041333 I0408 10:57:39.711170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:57:39.711207 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 10:57:39.71119945 +0000 UTC m=+415.748005631 I0408 10:57:39.711585 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 10:57:39.71158015 +0000 UTC m=+415.748386331 I0408 10:57:39.712143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:57:39.712166 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:57:39.712162636 +0000 UTC m=+415.748968817 I0408 10:57:39.712401 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 10:57:39.712397082 +0000 UTC m=+415.749203263 I0408 10:57:39.739794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:39.739852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:57:39.739915 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 10:57:39.739908068 +0000 UTC m=+415.776714249 I0408 10:57:39.742412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:39.742493 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 10:57:39.742482818 +0000 UTC m=+415.779289019 I0408 10:57:39.752531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:39.752646 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 10:57:39.752637308 +0000 UTC m=+415.789443489 I0408 10:57:39.848471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:39.864471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:39.894417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m92bm" condition "Approved" to 2026-04-08 10:57:39.894394028 +0000 UTC m=+415.931200209 I0408 10:57:39.896661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dktcs" condition "Approved" to 2026-04-08 10:57:39.896653581 +0000 UTC m=+415.933459772 I0408 10:57:39.919326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m92bm" condition "Ready" to 2026-04-08 10:57:39.919310393 +0000 UTC m=+415.956116584 I0408 10:57:39.919809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dktcs" condition "Ready" to 2026-04-08 10:57:39.919797837 +0000 UTC m=+415.956604018 I0408 10:57:39.952179 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:39.952168195 +0000 UTC m=+415.988974366 I0408 10:57:39.954270 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:39.954266552 +0000 UTC m=+415.991072723 I0408 10:57:40.014640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:40.019125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:40.407626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:40.454584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bmz7n" condition "Approved" to 2026-04-08 10:57:40.454569596 +0000 UTC m=+416.491375797 I0408 10:57:40.668155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bmz7n" condition "Ready" to 2026-04-08 10:57:40.668143949 +0000 UTC m=+416.704950130 I0408 10:57:41.051553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:41.250154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:41.300820 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:41.300805215 +0000 UTC m=+417.337611386 I0408 10:57:41.400027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:41.400503 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:41.400492722 +0000 UTC m=+417.437298923 I0408 10:57:41.649266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:41.698544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:48.175915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:57:48.175969 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" condition "Issuing" to 2026-04-08 10:57:48.175957522 +0000 UTC m=+424.212763733 I0408 10:57:48.176000 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" condition "Ready" to 2026-04-08 10:57:48.175979802 +0000 UTC m=+424.212786003 I0408 10:57:48.191731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:48.191851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:57:48.191908 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" condition "Issuing" to 2026-04-08 10:57:48.191900398 +0000 UTC m=+424.228706609 I0408 10:57:48.461884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5sjdt-lhn6s" condition "Approved" to 2026-04-08 10:57:48.46187247 +0000 UTC m=+424.498678641 I0408 10:57:48.477308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5sjdt-lhn6s" condition "Ready" to 2026-04-08 10:57:48.477295493 +0000 UTC m=+424.514101674 I0408 10:57:48.508560 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:48.508550011 +0000 UTC m=+424.545356182 I0408 10:57:48.531530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:48.531873 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:48.531864271 +0000 UTC m=+424.568670452 I0408 10:57:48.611247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:48.611844 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5sjdt-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:48.611831016 +0000 UTC m=+424.648637197 I0408 10:58:14.617084 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 10:58:14.617066581 +0000 UTC m=+450.653872762 I0408 10:58:14.617827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:58:14.617848 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 10:58:14.617843423 +0000 UTC m=+450.654649594 I0408 10:58:14.634632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:58:14.634696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:58:14.634715 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 10:58:14.634710036 +0000 UTC m=+450.671516217 I0408 10:58:14.867738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gwwvb" condition "Approved" to 2026-04-08 10:58:14.867728482 +0000 UTC m=+450.904534663 I0408 10:58:14.891646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gwwvb" condition "Ready" to 2026-04-08 10:58:14.891628997 +0000 UTC m=+450.928435188 I0408 10:58:14.933598 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:58:14.933584129 +0000 UTC m=+450.970390310 I0408 10:58:14.950977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:58:14.951281 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:58:14.951273765 +0000 UTC m=+450.988079946 I0408 10:58:14.959993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:58:14.975003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:26.925661 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 11:01:26.925613384 +0000 UTC m=+642.962419595 I0408 11:01:26.925807 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:01:26.925895 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 11:01:26.925884921 +0000 UTC m=+642.962691122 I0408 11:01:26.945386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:26.945515 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 11:01:26.945506409 +0000 UTC m=+642.982312590 I0408 11:01:27.162196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:27.198860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lv2jh" condition "Approved" to 2026-04-08 11:01:27.198839917 +0000 UTC m=+643.235646108 I0408 11:01:27.218409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lv2jh" condition "Ready" to 2026-04-08 11:01:27.218398283 +0000 UTC m=+643.255204464 I0408 11:01:27.247329 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:01:27.247314297 +0000 UTC m=+643.284120508 I0408 11:01:27.263057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:27.263378 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:01:27.263371296 +0000 UTC m=+643.300177477 I0408 11:01:27.279113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:27.287696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:03.372645 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 11:04:03.372607949 +0000 UTC m=+799.409414140 I0408 11:04:03.372936 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:04:03.373080 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 11:04:03.373067611 +0000 UTC m=+799.409873842 I0408 11:04:03.391222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:03.391361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:04:03.391418 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 11:04:03.391409615 +0000 UTC m=+799.428215806 I0408 11:04:03.606046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dhn2t" condition "Approved" to 2026-04-08 11:04:03.606035151 +0000 UTC m=+799.642841332 I0408 11:04:03.627237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dhn2t" condition "Ready" to 2026-04-08 11:04:03.627224492 +0000 UTC m=+799.664030673 I0408 11:04:03.652414 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:04:03.652401002 +0000 UTC m=+799.689207183 I0408 11:04:03.674799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:03.675212 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:04:03.675205287 +0000 UTC m=+799.712011468 I0408 11:04:03.695497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:05:05.462732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:05:05.462785 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 11:05:05.46277566 +0000 UTC m=+861.499581841 I0408 11:05:05.463123 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 11:05:05.463106359 +0000 UTC m=+861.499912540 I0408 11:05:05.477645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:05:05.477743 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:05:05.477771 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 11:05:05.477761999 +0000 UTC m=+861.514568170 I0408 11:05:05.650371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:05:05.661942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-t2qc5" condition "Approved" to 2026-04-08 11:05:05.661918179 +0000 UTC m=+861.698724350 I0408 11:05:05.683631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-t2qc5" condition "Ready" to 2026-04-08 11:05:05.683618912 +0000 UTC m=+861.720425093 I0408 11:05:05.709366 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:05:05.709353265 +0000 UTC m=+861.746159446 I0408 11:05:05.738419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:05:05.739356 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:05:05.739345524 +0000 UTC m=+861.776151705 I0408 11:05:05.755287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:05:05.755659 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:05:05.75564934 +0000 UTC m=+861.792455511 I0408 11:05:05.761862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:04.562522 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 11:08:04.562472754 +0000 UTC m=+1040.599278935 I0408 11:08:04.562596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:08:04.563064 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 11:08:04.562964067 +0000 UTC m=+1040.599770298 I0408 11:08:04.579829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:04.579906 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:08:04.579924 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 11:08:04.57991823 +0000 UTC m=+1040.616724411 I0408 11:08:04.699961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:04.703941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-c2wwv" condition "Approved" to 2026-04-08 11:08:04.703924714 +0000 UTC m=+1040.740730885 I0408 11:08:04.723694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-c2wwv" condition "Ready" to 2026-04-08 11:08:04.723684104 +0000 UTC m=+1040.760490285 I0408 11:08:04.750957 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:08:04.750943278 +0000 UTC m=+1040.787749459 I0408 11:08:04.779190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"