I0325 13:18:09.777485 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0325 13:18:09.777669 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0325 13:18:09.777759 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0325 13:18:09.781831 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0325 13:18:09.782305 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0325 13:18:09.782453 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0325 13:18:09.782468 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0325 13:18:09.785354 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0325 13:18:09.799634 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0325 13:18:09.803132 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0325 13:18:09.809883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0325 13:18:09.814221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0325 13:18:09.817218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0325 13:18:09.819084 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0325 13:18:09.819107 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0325 13:18:09.819116 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0325 13:18:09.819199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0325 13:18:09.820913 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0325 13:18:09.822813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0325 13:18:09.829682 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0325 13:18:09.829779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0325 13:18:09.834220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0325 13:18:09.837380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0325 13:18:09.839358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0325 13:18:09.841423 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0325 13:18:09.841592 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0325 13:18:09.843889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0325 13:18:09.848063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0325 13:18:09.851011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0325 13:18:09.856025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0325 13:18:09.858961 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0325 13:18:09.859040 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0325 13:18:09.862406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0325 13:18:09.864563 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:09.865394 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:09.865915 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:09.883808 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:09.901910 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:09.919814 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:09.959474 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:09.966673 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:09.989805 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:10.011267 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 13:18:22.672025 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-25 13:18:22.672004074 +0000 UTC m=+12.934044702 I0325 13:18:23.454239 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-25 13:18:23.454218375 +0000 UTC m=+13.716258983 I0325 13:18:23.454416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:18:23.454479 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-25 13:18:23.4544657 +0000 UTC m=+13.716506318 E0325 13:18:23.469894 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 13:18:23.470011 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-25 13:18:23.470002788 +0000 UTC m=+13.732043386 E0325 13:18:23.470038 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 13:18:23.473560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:18:23.473842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:18:23.473963 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-25 13:18:23.47387495 +0000 UTC m=+13.735915568 E0325 13:18:23.482476 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0325 13:18:23.482654 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 13:18:23.482695 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 13:18:23.482783 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0325 13:18:23.517973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:18:23.525203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hpclk" condition "Approved" to 2026-03-25 13:18:23.525186723 +0000 UTC m=+13.787227341 I0325 13:18:23.542504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hpclk" condition "Ready" to 2026-03-25 13:18:23.542489988 +0000 UTC m=+13.804530586 I0325 13:18:23.572325 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:18:23.572306187 +0000 UTC m=+13.834346815 I0325 13:18:23.593656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:18:28.483886 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:18:28.483828173 +0000 UTC m=+18.745868791 I0325 13:18:51.173456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:18:51.173555 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-25 13:18:51.173542889 +0000 UTC m=+41.435583487 I0325 13:18:51.173752 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-25 13:18:51.173726673 +0000 UTC m=+41.435767281 I0325 13:18:51.188535 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-25 13:18:51.188515765 +0000 UTC m=+41.450556343 I0325 13:18:51.209912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:18:51.210006 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-25 13:18:51.209998896 +0000 UTC m=+41.472039484 I0325 13:18:51.362977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:18:51.399686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fnbrb" condition "Approved" to 2026-03-25 13:18:51.399663813 +0000 UTC m=+41.661704451 I0325 13:18:51.429048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fnbrb" condition "Ready" to 2026-03-25 13:18:51.429035731 +0000 UTC m=+41.691076329 I0325 13:18:51.463048 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:18:51.463024886 +0000 UTC m=+41.725065524 I0325 13:18:51.487577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:18:51.548096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:09.880729 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-25 13:21:09.880718218 +0000 UTC m=+180.142758826 I0325 13:21:09.880685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:21:09.880924 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-25 13:21:09.880914853 +0000 UTC m=+180.142955441 E0325 13:21:09.896491 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 13:21:09.896640 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-25 13:21:09.896630612 +0000 UTC m=+180.158671210 I0325 13:21:09.896662 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 13:21:09.898422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:09.898482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:21:09.898498 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-25 13:21:09.898492493 +0000 UTC m=+180.160533081 E0325 13:21:09.906372 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0325 13:21:09.906820 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 13:21:09.906906 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0325 13:21:09.906965 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0325 13:21:09.911507 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-25 13:21:09.911487003 +0000 UTC m=+180.173527601 I0325 13:21:09.911659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:21:09.911746 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-25 13:21:09.911736889 +0000 UTC m=+180.173777487 I0325 13:21:09.932847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:09.932973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:21:09.933003 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-25 13:21:09.932995678 +0000 UTC m=+180.195036276 I0325 13:21:10.059264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-555qj" condition "Approved" to 2026-03-25 13:21:10.059241646 +0000 UTC m=+180.321282244 I0325 13:21:10.072131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:10.091685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5xt69" condition "Approved" to 2026-03-25 13:21:10.091663817 +0000 UTC m=+180.353704455 I0325 13:21:10.094242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-555qj" condition "Ready" to 2026-03-25 13:21:10.094224092 +0000 UTC m=+180.356264710 I0325 13:21:10.115144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5xt69" condition "Ready" to 2026-03-25 13:21:10.115113773 +0000 UTC m=+180.377154371 I0325 13:21:10.124766 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:21:10.124741782 +0000 UTC m=+180.386782400 I0325 13:21:10.145010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:10.145458 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:21:10.145445939 +0000 UTC m=+180.407486527 I0325 13:21:10.152998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:10.169080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:10.169318 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:21:10.169307765 +0000 UTC m=+180.431348363 I0325 13:21:10.176363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:14.907729 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:21:14.907715686 +0000 UTC m=+185.169756304 I0325 13:21:14.927887 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-5xt69" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:21:14.927873901 +0000 UTC m=+185.189914499 I0325 13:21:14.959123 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:21:14.959103586 +0000 UTC m=+185.221144184 I0325 13:21:15.015420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:21:15.089213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:24:03.148237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-47.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:24:03.148492 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-47.nip.io-tls" condition "Issuing" to 2026-03-25 13:24:03.148482799 +0000 UTC m=+353.410523407 I0325 13:24:03.148659 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-47.nip.io-tls" condition "Ready" to 2026-03-25 13:24:03.148634403 +0000 UTC m=+353.410675041 I0325 13:24:03.166363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-47.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-47.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:24:03.166527 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-47.nip.io-tls" condition "Ready" to 2026-03-25 13:24:03.166510454 +0000 UTC m=+353.428551142 I0325 13:24:03.341632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-47.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-47.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:24:03.376293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-47.nip.io-tls-m7bnw" condition "Approved" to 2026-03-25 13:24:03.376268853 +0000 UTC m=+353.638309461 I0325 13:24:03.400971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-47.nip.io-tls-m7bnw" condition "Ready" to 2026-03-25 13:24:03.400953321 +0000 UTC m=+353.662993929 I0325 13:24:03.434486 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-47.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:24:03.434469757 +0000 UTC m=+353.696510355 I0325 13:24:03.455532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-47.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-47.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:24:03.518075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-47.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-47.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:25:17.096422 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-25 13:25:17.096404901 +0000 UTC m=+427.358445479 I0325 13:25:17.096552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:25:17.096744 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-25 13:25:17.096716147 +0000 UTC m=+427.358756735 E0325 13:25:17.111108 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 13:25:17.111199 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-25 13:25:17.111189688 +0000 UTC m=+427.373230286 E0325 13:25:17.111226 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 13:25:17.113608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:25:17.113723 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-25 13:25:17.113712162 +0000 UTC m=+427.375752770 E0325 13:25:17.122297 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0325 13:25:17.122384 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 13:25:17.122409 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 13:25:17.122454 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0325 13:25:17.132079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:25:17.155739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zjd5b" condition "Approved" to 2026-03-25 13:25:17.155714614 +0000 UTC m=+427.417755232 I0325 13:25:17.168613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zjd5b" condition "Ready" to 2026-03-25 13:25:17.16859786 +0000 UTC m=+427.430638458 I0325 13:25:17.195498 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:25:17.195483819 +0000 UTC m=+427.457524407 I0325 13:25:17.212999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:25:22.123045 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:25:22.123030183 +0000 UTC m=+432.385070811 I0325 13:26:02.155560 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-25 13:26:02.155538564 +0000 UTC m=+472.417579142 I0325 13:26:02.155794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:02.155834 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-25 13:26:02.15582429 +0000 UTC m=+472.417864888 I0325 13:26:02.166509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:02.166550 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-25 13:26:02.166541771 +0000 UTC m=+472.428582359 I0325 13:26:02.166836 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-25 13:26:02.166820987 +0000 UTC m=+472.428861575 I0325 13:26:02.166898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:02.166927 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-25 13:26:02.166920949 +0000 UTC m=+472.428961537 I0325 13:26:02.171138 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-25 13:26:02.17113137 +0000 UTC m=+472.433171958 I0325 13:26:02.185837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:02.185942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:02.185969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-25 13:26:02.185962848 +0000 UTC m=+472.448003436 I0325 13:26:02.207005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:02.207084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:02.207108 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-25 13:26:02.207101912 +0000 UTC m=+472.469142500 I0325 13:26:02.212340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:02.212463 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-25 13:26:02.212400606 +0000 UTC m=+472.474441204 I0325 13:26:02.328889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:02.365207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x8lvd" condition "Approved" to 2026-03-25 13:26:02.365188895 +0000 UTC m=+472.627229533 I0325 13:26:02.397390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x8lvd" condition "Ready" to 2026-03-25 13:26:02.397371956 +0000 UTC m=+472.659412564 I0325 13:26:02.446397 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:02.446378287 +0000 UTC m=+472.708418885 I0325 13:26:02.454891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pslcf" condition "Approved" to 2026-03-25 13:26:02.454849469 +0000 UTC m=+472.716890097 I0325 13:26:02.485274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:02.485686 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:02.48566408 +0000 UTC m=+472.747704678 I0325 13:26:02.486896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pslcf" condition "Ready" to 2026-03-25 13:26:02.486877287 +0000 UTC m=+472.748917875 I0325 13:26:02.494425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jn54j" condition "Approved" to 2026-03-25 13:26:02.494406568 +0000 UTC m=+472.756447166 I0325 13:26:02.517468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:02.518029 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:02.518016035 +0000 UTC m=+472.780056663 I0325 13:26:02.712176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jn54j" condition "Ready" to 2026-03-25 13:26:02.712154302 +0000 UTC m=+472.974194930 I0325 13:26:02.898950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:02.949133 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:02.949060497 +0000 UTC m=+473.211101095 I0325 13:26:03.247222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:03.248051 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:03.248018573 +0000 UTC m=+473.510059191 I0325 13:26:03.348048 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:03.34802623 +0000 UTC m=+473.610066858 I0325 13:26:03.599756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:03.600289 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:03.600280004 +0000 UTC m=+473.862320602 I0325 13:26:03.648995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:03.897777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:10.384763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:10.384812 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" condition "Issuing" to 2026-03-25 13:26:10.384803527 +0000 UTC m=+480.646844125 I0325 13:26:10.384762 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" condition "Ready" to 2026-03-25 13:26:10.384721795 +0000 UTC m=+480.646762413 I0325 13:26:10.400060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:10.400184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:10.400222 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" condition "Issuing" to 2026-03-25 13:26:10.400211107 +0000 UTC m=+480.662251735 I0325 13:26:10.837794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hxzvh-hn5z4" condition "Approved" to 2026-03-25 13:26:10.83777693 +0000 UTC m=+481.099817528 I0325 13:26:10.857455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hxzvh-hn5z4" condition "Ready" to 2026-03-25 13:26:10.857439741 +0000 UTC m=+481.119480359 I0325 13:26:10.897734 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:10.897719786 +0000 UTC m=+481.159760384 I0325 13:26:10.922903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:10.983242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hxzvh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:37.136930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:37.137512 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-25 13:26:37.137509703 +0000 UTC m=+507.399550291 I0325 13:26:37.137480 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-25 13:26:37.137470162 +0000 UTC m=+507.399510760 I0325 13:26:37.155578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:37.155739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:26:37.155794 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-25 13:26:37.155787005 +0000 UTC m=+507.417827603 I0325 13:26:37.518802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4667g" condition "Approved" to 2026-03-25 13:26:37.518788067 +0000 UTC m=+507.780828655 I0325 13:26:37.538316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4667g" condition "Ready" to 2026-03-25 13:26:37.538304145 +0000 UTC m=+507.800344743 I0325 13:26:37.565056 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:37.565037008 +0000 UTC m=+507.827077626 I0325 13:26:37.584553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:37.584907 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:26:37.584899985 +0000 UTC m=+507.846940583 I0325 13:26:37.596050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:26:37.603303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:30:01.524644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:30:01.524718 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-25 13:30:01.524709746 +0000 UTC m=+711.786750344 I0325 13:30:01.524655 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-25 13:30:01.524601153 +0000 UTC m=+711.786641811 I0325 13:30:01.542792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:30:01.542912 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-25 13:30:01.542901115 +0000 UTC m=+711.804941713 I0325 13:30:01.913331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:30:01.950833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vgg5f" condition "Approved" to 2026-03-25 13:30:01.950817909 +0000 UTC m=+712.212858497 I0325 13:30:01.978034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vgg5f" condition "Ready" to 2026-03-25 13:30:01.978018231 +0000 UTC m=+712.240058859 I0325 13:30:02.010850 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:30:02.010836785 +0000 UTC m=+712.272877373 I0325 13:30:02.037517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:32:38.863557 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-25 13:32:38.863508993 +0000 UTC m=+869.125549621 I0325 13:32:38.863635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:32:38.863728 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-25 13:32:38.863715098 +0000 UTC m=+869.125755776 I0325 13:32:38.881934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:32:38.882023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:32:38.882039 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-25 13:32:38.882034119 +0000 UTC m=+869.144074717 I0325 13:32:39.054787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:32:39.067786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6xc25" condition "Approved" to 2026-03-25 13:32:39.067770613 +0000 UTC m=+869.329811201 I0325 13:32:39.094888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6xc25" condition "Ready" to 2026-03-25 13:32:39.094874393 +0000 UTC m=+869.356914991 I0325 13:32:39.152522 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:32:39.152496246 +0000 UTC m=+869.414536864 I0325 13:32:39.189348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:32:39.189810 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:32:39.189801144 +0000 UTC m=+869.451841742 I0325 13:32:39.199831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:32:39.210427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:33:48.300828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:33:48.300860 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-25 13:33:48.300851463 +0000 UTC m=+938.562892061 I0325 13:33:48.301291 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-25 13:33:48.301285093 +0000 UTC m=+938.563325691 I0325 13:33:48.322915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:33:48.322959 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-25 13:33:48.322955356 +0000 UTC m=+938.584995944 I0325 13:33:48.524433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:33:48.562945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2f6vn" condition "Approved" to 2026-03-25 13:33:48.562930811 +0000 UTC m=+938.824971429 I0325 13:33:48.587738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2f6vn" condition "Ready" to 2026-03-25 13:33:48.587725792 +0000 UTC m=+938.849766390 I0325 13:33:48.643243 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:33:48.643226989 +0000 UTC m=+938.905267577 I0325 13:33:48.675312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:37:04.474810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 13:37:04.474914 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-25 13:37:04.474899396 +0000 UTC m=+1134.736940024 I0325 13:37:04.475172 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-25 13:37:04.475151941 +0000 UTC m=+1134.737192529 I0325 13:37:04.497033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:37:04.497135 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-25 13:37:04.497124141 +0000 UTC m=+1134.759164769 I0325 13:37:04.691676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:37:04.728269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vhrpg" condition "Approved" to 2026-03-25 13:37:04.728258234 +0000 UTC m=+1134.990298822 I0325 13:37:04.754558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vhrpg" condition "Ready" to 2026-03-25 13:37:04.754539836 +0000 UTC m=+1135.016580464 I0325 13:37:04.789541 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 13:37:04.789527105 +0000 UTC m=+1135.051567703 I0325 13:37:04.819201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 13:37:04.878106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"