I0319 21:53:05.059911 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0319 21:53:05.060035 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0319 21:53:05.060115 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0319 21:53:05.064507 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0319 21:53:05.064967 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0319 21:53:05.065095 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0319 21:53:05.065225 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0319 21:53:05.067819 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0319 21:53:05.089319 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0319 21:53:05.094018 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0319 21:53:05.099911 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0319 21:53:05.103695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0319 21:53:05.105599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0319 21:53:05.107531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0319 21:53:05.109304 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0319 21:53:05.109445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0319 21:53:05.111163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0319 21:53:05.113076 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0319 21:53:05.116176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0319 21:53:05.119429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0319 21:53:05.122009 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0319 21:53:05.122039 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0319 21:53:05.122051 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0319 21:53:05.122060 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0319 21:53:05.122115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0319 21:53:05.124676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0319 21:53:05.127300 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0319 21:53:05.129774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0319 21:53:05.132504 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0319 21:53:05.135299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0319 21:53:05.137601 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0319 21:53:05.137692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0319 21:53:05.141065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0319 21:53:05.144606 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.146194 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.148040 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.165122 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.179707 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.180717 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.199893 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.219529 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.241514 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:05.261094 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 21:53:27.437894 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-19 21:53:27.437881409 +0000 UTC m=+22.412648192 I0319 21:53:28.157851 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-19 21:53:28.157836508 +0000 UTC m=+23.132603321 I0319 21:53:28.159076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 21:53:28.159154 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-19 21:53:28.159144027 +0000 UTC m=+23.133910840 E0319 21:53:28.173619 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0319 21:53:28.173720 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-19 21:53:28.173712312 +0000 UTC m=+23.148479125 E0319 21:53:28.173751 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0319 21:53:28.175425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:53:28.175485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 21:53:28.175500 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-19 21:53:28.175494791 +0000 UTC m=+23.150261574 E0319 21:53:28.189798 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0319 21:53:28.189951 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0319 21:53:28.190012 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0319 21:53:28.190058 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0319 21:53:28.218653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6n7kb" condition "Approved" to 2026-03-19 21:53:28.218645613 +0000 UTC m=+23.193412386 I0319 21:53:28.234131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6n7kb" condition "Ready" to 2026-03-19 21:53:28.234114777 +0000 UTC m=+23.208881580 I0319 21:53:28.268230 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:53:28.268214966 +0000 UTC m=+23.242981779 I0319 21:53:28.290297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:53:28.290814 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:53:28.290803559 +0000 UTC m=+23.265570362 I0319 21:53:28.314906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:53:33.191237 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:53:33.191222756 +0000 UTC m=+28.165989569 I0319 21:53:53.991196 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-19 21:53:53.99115488 +0000 UTC m=+48.965921663 I0319 21:53:53.991326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 21:53:53.991385 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-19 21:53:53.991372496 +0000 UTC m=+48.966139279 I0319 21:53:54.002276 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-19 21:53:54.002264997 +0000 UTC m=+48.977031800 I0319 21:53:54.013604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:53:54.013678 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-19 21:53:54.013673283 +0000 UTC m=+48.988440066 I0319 21:53:54.210569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:53:54.251667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rtrtg" condition "Approved" to 2026-03-19 21:53:54.25164838 +0000 UTC m=+49.226415213 I0319 21:53:54.283599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rtrtg" condition "Ready" to 2026-03-19 21:53:54.283578282 +0000 UTC m=+49.258345095 I0319 21:53:54.315183 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:53:54.315168985 +0000 UTC m=+49.289935768 I0319 21:53:54.335862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:53:54.336269 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:53:54.336261475 +0000 UTC m=+49.311028258 I0319 21:53:54.354063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:53:54.354501 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:53:54.35449121 +0000 UTC m=+49.329257993 I0319 21:58:21.386583 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-19 21:58:21.386507975 +0000 UTC m=+316.361274748 I0319 21:58:21.386684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 21:58:21.386789 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-19 21:58:21.386776241 +0000 UTC m=+316.361543054 I0319 21:58:21.482193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:58:21.482276 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-19 21:58:21.482266791 +0000 UTC m=+316.457033574 E0319 21:58:21.482353 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0319 21:58:21.482514 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-19 21:58:21.482501246 +0000 UTC m=+316.457268059 I0319 21:58:21.482552 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0319 21:58:21.559341 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0319 21:58:21.559492 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0319 21:58:21.559529 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0319 21:58:21.559568 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0319 21:58:21.560149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 21:58:21.560174 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-19 21:58:21.560166779 +0000 UTC m=+316.534933562 I0319 21:58:21.560312 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-19 21:58:21.560191449 +0000 UTC m=+316.534958252 I0319 21:58:22.021214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:58:22.021331 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-19 21:58:22.021318985 +0000 UTC m=+316.996085798 I0319 21:58:22.133323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:58:22.532569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:58:22.533230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lztsj" condition "Approved" to 2026-03-19 21:58:22.533222762 +0000 UTC m=+317.507989545 I0319 21:58:23.381778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lztsj" condition "Ready" to 2026-03-19 21:58:23.381767659 +0000 UTC m=+318.356534422 I0319 21:58:23.644374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bnq5n" condition "Approved" to 2026-03-19 21:58:23.644359147 +0000 UTC m=+318.619125930 I0319 21:58:23.707598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bnq5n" condition "Ready" to 2026-03-19 21:58:23.707582877 +0000 UTC m=+318.682349650 I0319 21:58:23.828861 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:58:23.828839902 +0000 UTC m=+318.803606715 I0319 21:58:23.914911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:58:26.560735 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:58:26.560725427 +0000 UTC m=+321.535492210 I0319 21:58:26.870609 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-bnq5n" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:58:26.870596559 +0000 UTC m=+321.845363342 I0319 21:58:27.699489 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 21:58:27.699471207 +0000 UTC m=+322.674238000 I0319 21:58:27.907178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0319 21:58:28.206669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:01:19.017144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-36.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:01:19.017185 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Issuing" to 2026-03-19 22:01:19.017175725 +0000 UTC m=+493.991942528 I0319 22:01:19.017587 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready" to 2026-03-19 22:01:19.017579334 +0000 UTC m=+493.992346137 I0319 22:01:19.036695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:01:19.036745 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-36.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:01:19.036756 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Issuing" to 2026-03-19 22:01:19.03675172 +0000 UTC m=+494.011518503 I0319 22:01:19.332294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:01:19.340693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-36.nip.io-tls-q2w48" condition "Approved" to 2026-03-19 22:01:19.340681044 +0000 UTC m=+494.315447827 I0319 22:01:19.358447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-36.nip.io-tls-q2w48" condition "Ready" to 2026-03-19 22:01:19.358435798 +0000 UTC m=+494.333202611 I0319 22:01:19.385379 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:01:19.385366606 +0000 UTC m=+494.360133389 I0319 22:01:19.405413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:01:19.405910 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:01:19.405901442 +0000 UTC m=+494.380668245 I0319 22:01:19.414716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:01:19.422752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:01:19.423029 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:01:19.423021631 +0000 UTC m=+494.397788414 I0319 22:01:19.425137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:02:30.877725 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-19 22:02:30.877703679 +0000 UTC m=+565.852470482 I0319 22:02:30.878442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:02:30.878577 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-19 22:02:30.878559869 +0000 UTC m=+565.853326742 E0319 22:02:31.069498 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0319 22:02:31.069570 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-19 22:02:31.069562189 +0000 UTC m=+566.044328962 E0319 22:02:31.069594 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0319 22:02:31.075259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:02:31.075491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:02:31.075552 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-19 22:02:31.075543002 +0000 UTC m=+566.050309785 E0319 22:02:31.081932 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0319 22:02:31.082090 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0319 22:02:31.082128 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0319 22:02:31.082167 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0319 22:02:31.388902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-287lc" condition "Approved" to 2026-03-19 22:02:31.388883085 +0000 UTC m=+566.363649858 I0319 22:02:31.388973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:02:31.443722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-287lc" condition "Ready" to 2026-03-19 22:02:31.443712205 +0000 UTC m=+566.418478988 I0319 22:02:31.647952 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:02:31.647935209 +0000 UTC m=+566.622702012 I0319 22:02:31.753133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:02:31.753752 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:02:31.753740824 +0000 UTC m=+566.728507637 I0319 22:02:32.202391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:02:32.824891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:02:36.083151 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:02:36.083134608 +0000 UTC m=+571.057901421 I0319 22:03:15.260440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:03:15.260552 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-19 22:03:15.260541219 +0000 UTC m=+610.235308032 I0319 22:03:15.260596 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-19 22:03:15.26058154 +0000 UTC m=+610.235348303 I0319 22:03:15.268041 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-19 22:03:15.268028645 +0000 UTC m=+610.242795418 I0319 22:03:15.268613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:03:15.268639 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-19 22:03:15.268635089 +0000 UTC m=+610.243401872 I0319 22:03:15.268866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:03:15.268941 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-19 22:03:15.268936616 +0000 UTC m=+610.243703399 I0319 22:03:15.268948 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-19 22:03:15.268938066 +0000 UTC m=+610.243704849 I0319 22:03:15.294146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:15.294202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:03:15.294223 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-19 22:03:15.294215729 +0000 UTC m=+610.268982512 I0319 22:03:15.298313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:15.298383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:03:15.298408 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-19 22:03:15.298400921 +0000 UTC m=+610.273167694 I0319 22:03:15.302024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:15.302068 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-19 22:03:15.302063663 +0000 UTC m=+610.276830436 I0319 22:03:15.424671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:15.450858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:15.454636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wcrks" condition "Approved" to 2026-03-19 22:03:15.454613628 +0000 UTC m=+610.429380421 I0319 22:03:15.457218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m2k9n" condition "Approved" to 2026-03-19 22:03:15.457196375 +0000 UTC m=+610.431963188 I0319 22:03:15.483396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wcrks" condition "Ready" to 2026-03-19 22:03:15.483381888 +0000 UTC m=+610.458148671 I0319 22:03:15.487117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m2k9n" condition "Ready" to 2026-03-19 22:03:15.487100931 +0000 UTC m=+610.461867694 I0319 22:03:15.529951 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:03:15.529936284 +0000 UTC m=+610.504703067 I0319 22:03:15.530613 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:03:15.530606579 +0000 UTC m=+610.505373362 I0319 22:03:15.548226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:15.548750 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:03:15.548742963 +0000 UTC m=+610.523509746 I0319 22:03:15.551977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:15.552376 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:03:15.552367873 +0000 UTC m=+610.527134656 I0319 22:03:15.740440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:15.938684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:16.018056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:16.326004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2tjtm" condition "Approved" to 2026-03-19 22:03:16.325982589 +0000 UTC m=+611.300749402 I0319 22:03:16.451981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2tjtm" condition "Ready" to 2026-03-19 22:03:16.451965962 +0000 UTC m=+611.426732735 I0319 22:03:16.884563 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:03:16.884543548 +0000 UTC m=+611.859310331 I0319 22:03:16.906324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:16.906822 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:03:16.906807994 +0000 UTC m=+611.881574817 I0319 22:03:17.137733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:17.193210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:27.939644 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" condition "Ready" to 2026-03-19 22:03:27.939604352 +0000 UTC m=+622.914371165 I0319 22:03:27.939851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:03:27.939893 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" condition "Issuing" to 2026-03-19 22:03:27.939884618 +0000 UTC m=+622.914651401 I0319 22:03:27.955169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:27.955228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:03:27.955245 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" condition "Issuing" to 2026-03-19 22:03:27.955239799 +0000 UTC m=+622.930006582 I0319 22:03:28.155113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qlcgr-cjklq" condition "Approved" to 2026-03-19 22:03:28.155094767 +0000 UTC m=+623.129861550 I0319 22:03:28.186998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qlcgr-cjklq" condition "Ready" to 2026-03-19 22:03:28.186984907 +0000 UTC m=+623.161751690 I0319 22:03:28.940714 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:03:28.940695209 +0000 UTC m=+623.915461982 I0319 22:03:28.971221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:03:28.971604 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:03:28.971597637 +0000 UTC m=+623.946364420 I0319 22:03:28.996956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qlcgr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:04:03.485259 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-19 22:04:03.485240693 +0000 UTC m=+658.460007476 I0319 22:04:03.485360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:04:03.485410 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-19 22:04:03.485399877 +0000 UTC m=+658.460166660 I0319 22:04:03.499290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:04:03.499379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:04:03.499399 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-19 22:04:03.499391048 +0000 UTC m=+658.474157851 I0319 22:04:03.763462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:04:03.772668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-blskz" condition "Approved" to 2026-03-19 22:04:03.772652959 +0000 UTC m=+658.747419742 I0319 22:04:03.790837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-blskz" condition "Ready" to 2026-03-19 22:04:03.790826843 +0000 UTC m=+658.765593626 I0319 22:04:03.813218 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:04:03.813195291 +0000 UTC m=+658.787962074 I0319 22:04:03.832122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:04:03.878830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:07:40.921796 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-19 22:07:40.921776698 +0000 UTC m=+875.896543501 I0319 22:07:40.921891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:07:40.921997 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-19 22:07:40.921989563 +0000 UTC m=+875.896756366 I0319 22:07:40.978389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:07:40.978486 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-19 22:07:40.97847659 +0000 UTC m=+875.953243393 I0319 22:07:41.199171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:07:41.231867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2dxp8" condition "Approved" to 2026-03-19 22:07:41.231854463 +0000 UTC m=+876.206621256 I0319 22:07:41.248048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2dxp8" condition "Ready" to 2026-03-19 22:07:41.248035903 +0000 UTC m=+876.222802686 I0319 22:07:41.272188 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:07:41.272174249 +0000 UTC m=+876.246941032 I0319 22:07:41.291518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:10:13.258164 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-19 22:10:13.2581507 +0000 UTC m=+1028.232917513 I0319 22:10:13.258206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:10:13.258298 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-19 22:10:13.258287214 +0000 UTC m=+1028.233054027 I0319 22:10:13.273735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:10:13.273821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:10:13.273875 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-19 22:10:13.273831608 +0000 UTC m=+1028.248598391 I0319 22:10:13.472442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:10:13.485103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tfjn5" condition "Approved" to 2026-03-19 22:10:13.48509307 +0000 UTC m=+1028.459859853 I0319 22:10:13.511846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tfjn5" condition "Ready" to 2026-03-19 22:10:13.511830763 +0000 UTC m=+1028.486597566 I0319 22:10:13.536617 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:10:13.536602503 +0000 UTC m=+1028.511369286 I0319 22:10:13.569907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:10:13.570173 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:10:13.570165408 +0000 UTC m=+1028.544932201 I0319 22:10:13.590666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:11:49.657130 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-19 22:11:49.657110174 +0000 UTC m=+1124.631876977 I0319 22:11:49.657665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:11:49.657757 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-19 22:11:49.657746278 +0000 UTC m=+1124.632513081 I0319 22:11:49.674586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:11:49.674693 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:11:49.674724 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-19 22:11:49.674718015 +0000 UTC m=+1124.649484798 I0319 22:11:49.871391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-l7jt6" condition "Approved" to 2026-03-19 22:11:49.871377644 +0000 UTC m=+1124.846144447 I0319 22:11:49.890760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-l7jt6" condition "Ready" to 2026-03-19 22:11:49.890749064 +0000 UTC m=+1124.865515867 I0319 22:11:49.916880 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:11:49.916868835 +0000 UTC m=+1124.891635618 I0319 22:11:49.934626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:11:49.935249 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:11:49.935239353 +0000 UTC m=+1124.910006136 I0319 22:11:49.957851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:11:49.958141 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:11:49.958132941 +0000 UTC m=+1124.932899724 I0319 22:15:10.081021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:15:10.081117 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-19 22:15:10.081104514 +0000 UTC m=+1325.055871317 I0319 22:15:10.081074 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-19 22:15:10.081054643 +0000 UTC m=+1325.055821456 I0319 22:15:10.149128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:15:10.149210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 22:15:10.149234 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-19 22:15:10.149228897 +0000 UTC m=+1325.123995670 I0319 22:15:10.430183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wfmqc" condition "Approved" to 2026-03-19 22:15:10.430162354 +0000 UTC m=+1325.404929157 I0319 22:15:10.452608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wfmqc" condition "Ready" to 2026-03-19 22:15:10.452590172 +0000 UTC m=+1325.427356985 I0319 22:15:10.490825 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:15:10.490808691 +0000 UTC m=+1325.465575474 I0319 22:15:10.516045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:15:10.516319 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:15:10.516313667 +0000 UTC m=+1325.491080450 I0319 22:15:10.537951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 22:15:10.538430 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 22:15:10.538422249 +0000 UTC m=+1325.513189032 I0319 22:15:10.542004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"