I0325 16:54:31.003159 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0325 16:54:31.003315 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0325 16:54:31.003404 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0325 16:54:31.009290 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0325 16:54:31.009775 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0325 16:54:31.009872 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0325 16:54:31.009921 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0325 16:54:31.012711 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0325 16:54:31.025291 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0325 16:54:31.025505 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0325 16:54:31.025573 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0325 16:54:31.029726 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0325 16:54:31.034140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0325 16:54:31.040594 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0325 16:54:31.040631 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0325 16:54:31.040710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0325 16:54:31.044232 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0325 16:54:31.046564 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0325 16:54:31.049217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0325 16:54:31.051843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0325 16:54:31.054632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0325 16:54:31.059120 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0325 16:54:31.059285 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0325 16:54:31.064185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0325 16:54:31.067400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0325 16:54:31.069361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0325 16:54:31.071288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0325 16:54:31.073284 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0325 16:54:31.075168 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0325 16:54:31.075361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0325 16:54:31.077201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0325 16:54:31.079214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0325 16:54:31.085480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0325 16:54:31.088009 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.088392 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.088431 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.088815 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.107475 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.128474 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.144867 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.159032 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.174320 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:31.184058 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 16:54:44.862085 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-25 16:54:44.862072971 +0000 UTC m=+13.889210904 I0325 16:54:45.563853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:54:45.563903 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-25 16:54:45.563893136 +0000 UTC m=+14.591031089 I0325 16:54:45.563954 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-25 16:54:45.563938477 +0000 UTC m=+14.591076420 E0325 16:54:45.579351 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 16:54:45.579446 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-25 16:54:45.579436453 +0000 UTC m=+14.606574386 E0325 16:54:45.579577 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 16:54:45.581867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:54:45.582009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:54:45.582082 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-25 16:54:45.582070682 +0000 UTC m=+14.609208635 E0325 16:54:45.589235 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0325 16:54:45.589458 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 16:54:45.589587 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 16:54:45.589736 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0325 16:54:45.636006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9p96j" condition "Approved" to 2026-03-25 16:54:45.635988163 +0000 UTC m=+14.663126116 I0325 16:54:45.648759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9p96j" condition "Ready" to 2026-03-25 16:54:45.648744926 +0000 UTC m=+14.675882859 I0325 16:54:45.671758 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:54:45.671743328 +0000 UTC m=+14.698881261 I0325 16:54:45.693052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:54:45.693644 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:54:45.693631751 +0000 UTC m=+14.720769714 I0325 16:54:45.712622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:54:45.712843 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:54:45.712835464 +0000 UTC m=+14.739973397 I0325 16:54:50.591065 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:54:50.591042482 +0000 UTC m=+19.618180435 I0325 16:55:13.366544 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-25 16:55:13.366516945 +0000 UTC m=+42.393654878 I0325 16:55:13.366696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:55:13.366771 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-25 16:55:13.366761472 +0000 UTC m=+42.393899415 I0325 16:55:13.386146 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-25 16:55:13.386134029 +0000 UTC m=+42.413271962 I0325 16:55:13.403489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:55:13.403579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:55:13.403609 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-25 16:55:13.403600976 +0000 UTC m=+42.430738909 I0325 16:55:13.649472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r6nbj" condition "Approved" to 2026-03-25 16:55:13.64945939 +0000 UTC m=+42.676597343 I0325 16:55:13.755513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-r6nbj" condition "Ready" to 2026-03-25 16:55:13.755495004 +0000 UTC m=+42.782632967 I0325 16:55:13.903876 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:55:13.903857206 +0000 UTC m=+42.930995159 I0325 16:55:13.976343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:55:13.976711 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:55:13.976704523 +0000 UTC m=+43.003842456 I0325 16:55:14.142156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:56:59.952540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:56:59.952584 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-25 16:56:59.952573215 +0000 UTC m=+148.979711168 I0325 16:56:59.952689 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-25 16:56:59.952668267 +0000 UTC m=+148.979806210 E0325 16:56:59.967923 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 16:56:59.967997 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-25 16:56:59.967988017 +0000 UTC m=+148.995125960 I0325 16:56:59.968023 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 16:56:59.971948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:56:59.972021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:56:59.972042 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-25 16:56:59.972037213 +0000 UTC m=+148.999175146 E0325 16:56:59.981908 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0325 16:56:59.982009 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 16:56:59.982037 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0325 16:56:59.982071 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0325 16:56:59.987709 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-25 16:56:59.987691241 +0000 UTC m=+149.014829204 I0325 16:56:59.987887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:56:59.987955 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-25 16:56:59.987939967 +0000 UTC m=+149.015077990 I0325 16:57:00.016410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:57:00.016589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:57:00.016717 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-25 16:57:00.016703059 +0000 UTC m=+149.043841022 I0325 16:57:00.213970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-wlrnj" condition "Approved" to 2026-03-25 16:57:00.21395377 +0000 UTC m=+149.241091723 I0325 16:57:00.243056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-wlrnj" condition "Ready" to 2026-03-25 16:57:00.24304603 +0000 UTC m=+149.270183953 I0325 16:57:00.273891 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:57:00.273875205 +0000 UTC m=+149.301013128 I0325 16:57:00.295644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:57:00.296438 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:57:00.296421484 +0000 UTC m=+149.323559447 I0325 16:57:00.314861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:57:00.351041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4gjnq" condition "Approved" to 2026-03-25 16:57:00.3510239 +0000 UTC m=+149.378161863 I0325 16:57:00.373950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4gjnq" condition "Ready" to 2026-03-25 16:57:00.373887727 +0000 UTC m=+149.401025680 I0325 16:57:04.983251 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:57:04.983233719 +0000 UTC m=+154.010371682 I0325 16:57:05.000444 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-4gjnq" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:57:05.000432299 +0000 UTC m=+154.027570262 I0325 16:57:05.031747 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:57:05.031726866 +0000 UTC m=+154.058864829 I0325 16:57:05.050659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:57:05.051116 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:57:05.051109512 +0000 UTC m=+154.078247445 I0325 16:57:05.072086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:59:53.767492 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready" to 2026-03-25 16:59:53.767457642 +0000 UTC m=+322.794595575 I0325 16:59:53.767572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-103.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 16:59:53.767637 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Issuing" to 2026-03-25 16:59:53.767631036 +0000 UTC m=+322.794768959 I0325 16:59:53.787372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:59:53.787466 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready" to 2026-03-25 16:59:53.787456632 +0000 UTC m=+322.814594595 I0325 16:59:53.928525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:59:53.960938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-103.nip.io-tls-sfrz8" condition "Approved" to 2026-03-25 16:59:53.960920565 +0000 UTC m=+322.988058518 I0325 16:59:53.983077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-103.nip.io-tls-sfrz8" condition "Ready" to 2026-03-25 16:59:53.983061299 +0000 UTC m=+323.010199262 I0325 16:59:54.020973 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:59:54.020957023 +0000 UTC m=+323.048094956 I0325 16:59:54.045120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:59:54.045487 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:59:54.045479579 +0000 UTC m=+323.072617512 I0325 16:59:54.050999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:59:54.065804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-103.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-103.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 16:59:54.066364 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-103.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 16:59:54.066352491 +0000 UTC m=+323.093490444 I0325 17:01:15.891550 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-25 17:01:15.891373324 +0000 UTC m=+404.918511257 I0325 17:01:15.891583 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:01:15.891677 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-25 17:01:15.891664682 +0000 UTC m=+404.918802625 E0325 17:01:15.908896 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 17:01:15.908960 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-25 17:01:15.90894573 +0000 UTC m=+404.936083683 E0325 17:01:15.909039 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 17:01:15.911804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:01:15.911899 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-25 17:01:15.911891298 +0000 UTC m=+404.939029241 E0325 17:01:15.919694 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0325 17:01:15.919798 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 17:01:15.919826 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 17:01:15.919865 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0325 17:01:15.926296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:01:15.926368 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-25 17:01:15.926360473 +0000 UTC m=+404.953498406 I0325 17:01:15.933279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ctps4" condition "Approved" to 2026-03-25 17:01:15.933261632 +0000 UTC m=+404.960399665 I0325 17:01:15.938334 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-25 17:01:15.938316093 +0000 UTC m=+404.965454016 I0325 17:01:15.945485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:01:15.946163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ctps4" condition "Ready" to 2026-03-25 17:01:15.946155687 +0000 UTC m=+404.973293610 I0325 17:01:15.967175 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:01:15.967159852 +0000 UTC m=+404.994297805 I0325 17:01:15.989762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:01:20.920251 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:01:20.920234348 +0000 UTC m=+409.947372301 I0325 17:02:02.038870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:02:02.038902 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-25 17:02:02.038878729 +0000 UTC m=+451.066016662 I0325 17:02:02.038969 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-25 17:02:02.038959832 +0000 UTC m=+451.066097765 I0325 17:02:02.039040 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-25 17:02:02.039027593 +0000 UTC m=+451.066165506 I0325 17:02:02.040127 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-25 17:02:02.040118511 +0000 UTC m=+451.067256444 I0325 17:02:02.040318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:02:02.040425 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-25 17:02:02.040412479 +0000 UTC m=+451.067550452 I0325 17:02:02.041012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:02:02.041077 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-25 17:02:02.041067506 +0000 UTC m=+451.068205439 I0325 17:02:02.074453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.074575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:02:02.074620 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-25 17:02:02.074607577 +0000 UTC m=+451.101745540 I0325 17:02:02.075263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.075338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:02:02.075372 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-25 17:02:02.075363987 +0000 UTC m=+451.102501950 I0325 17:02:02.075745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.075795 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-25 17:02:02.075789868 +0000 UTC m=+451.102927811 I0325 17:02:02.246779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-s64cd" condition "Approved" to 2026-03-25 17:02:02.246750929 +0000 UTC m=+451.273888882 I0325 17:02:02.270290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-s64cd" condition "Ready" to 2026-03-25 17:02:02.27027069 +0000 UTC m=+451.297408653 I0325 17:02:02.291216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.293678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2d4xp" condition "Approved" to 2026-03-25 17:02:02.293658098 +0000 UTC m=+451.320796031 I0325 17:02:02.305089 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:02.305069695 +0000 UTC m=+451.332207648 I0325 17:02:02.315612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2d4xp" condition "Ready" to 2026-03-25 17:02:02.315593448 +0000 UTC m=+451.342731381 I0325 17:02:02.368673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.368980 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:02.368972545 +0000 UTC m=+451.396110468 I0325 17:02:02.388793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.427473 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:02.427461824 +0000 UTC m=+451.454599747 I0325 17:02:02.437959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.514530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.514885 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:02.514879545 +0000 UTC m=+451.542017468 I0325 17:02:02.866414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:02.916701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:03.270789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-szmv8" condition "Approved" to 2026-03-25 17:02:03.270770912 +0000 UTC m=+452.297908845 I0325 17:02:03.631214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-szmv8" condition "Ready" to 2026-03-25 17:02:03.631188186 +0000 UTC m=+452.658326109 I0325 17:02:03.828694 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-szmv8" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-7s2zm" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0325 17:02:04.054672 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-7s2zm\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0325 17:02:04.071422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tggbc" condition "Approved" to 2026-03-25 17:02:04.071397232 +0000 UTC m=+453.098535185 I0325 17:02:04.427356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tggbc" condition "Ready" to 2026-03-25 17:02:04.427331739 +0000 UTC m=+453.454469702 I0325 17:02:04.619400 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:04.619387297 +0000 UTC m=+453.646525230 I0325 17:02:04.714694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:04.715332 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:04.71532128 +0000 UTC m=+453.742459213 I0325 17:02:05.192481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:05.193399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:11.343472 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" condition "Ready" to 2026-03-25 17:02:11.343447681 +0000 UTC m=+460.370585644 I0325 17:02:11.343506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:02:11.343785 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" condition "Issuing" to 2026-03-25 17:02:11.343778809 +0000 UTC m=+460.370916742 I0325 17:02:11.356533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:11.356622 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" condition "Ready" to 2026-03-25 17:02:11.356613003 +0000 UTC m=+460.383750936 I0325 17:02:11.546695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:11.578948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m6b6b-xdt9l" condition "Approved" to 2026-03-25 17:02:11.578921558 +0000 UTC m=+460.606059541 I0325 17:02:11.600587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m6b6b-xdt9l" condition "Ready" to 2026-03-25 17:02:11.60057007 +0000 UTC m=+460.627708003 I0325 17:02:11.633001 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:11.632981992 +0000 UTC m=+460.660119925 I0325 17:02:11.655331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:11.655786 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:11.655778865 +0000 UTC m=+460.682916798 I0325 17:02:11.661408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:11.672064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:11.672488 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:11.672477529 +0000 UTC m=+460.699615452 I0325 17:02:11.678207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m6b6b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:40.232628 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-25 17:02:40.232605338 +0000 UTC m=+489.259743301 I0325 17:02:40.232801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:02:40.232858 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-25 17:02:40.232843234 +0000 UTC m=+489.259981187 I0325 17:02:40.250877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:40.250971 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-25 17:02:40.250961524 +0000 UTC m=+489.278099457 I0325 17:02:40.433439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:40.474650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jt54h" condition "Approved" to 2026-03-25 17:02:40.474625015 +0000 UTC m=+489.501762938 I0325 17:02:40.498913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jt54h" condition "Ready" to 2026-03-25 17:02:40.498896015 +0000 UTC m=+489.526033948 I0325 17:02:40.531342 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:02:40.531326817 +0000 UTC m=+489.558464750 I0325 17:02:40.555516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:02:40.610629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:05:50.379069 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-25 17:05:50.379044567 +0000 UTC m=+679.406182500 I0325 17:05:50.379087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:05:50.379234 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-25 17:05:50.379228331 +0000 UTC m=+679.406366254 I0325 17:05:50.402952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:05:50.403072 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-25 17:05:50.403062081 +0000 UTC m=+679.430200034 I0325 17:05:50.840645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:05:50.875148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7qsqx" condition "Approved" to 2026-03-25 17:05:50.875121311 +0000 UTC m=+679.902259244 I0325 17:05:50.898057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7qsqx" condition "Ready" to 2026-03-25 17:05:50.898038017 +0000 UTC m=+679.925175950 I0325 17:05:50.938319 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:05:50.938300934 +0000 UTC m=+679.965438857 I0325 17:05:50.962334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:05:50.962725 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:05:50.962718709 +0000 UTC m=+679.989856632 I0325 17:05:50.985410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:05:50.986975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:08:16.825109 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-25 17:08:16.825071005 +0000 UTC m=+825.852208938 I0325 17:08:16.825185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:08:16.825263 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-25 17:08:16.825253389 +0000 UTC m=+825.852391342 I0325 17:08:16.851104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:08:16.851196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:08:16.851215 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-25 17:08:16.851210043 +0000 UTC m=+825.878347976 I0325 17:08:17.082374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:08:17.089832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4mpgc" condition "Approved" to 2026-03-25 17:08:17.089811293 +0000 UTC m=+826.116949226 I0325 17:08:17.117236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4mpgc" condition "Ready" to 2026-03-25 17:08:17.117219884 +0000 UTC m=+826.144357817 I0325 17:08:17.149324 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:08:17.149299727 +0000 UTC m=+826.176437650 I0325 17:08:17.176270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:09:28.730329 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-25 17:09:28.730309738 +0000 UTC m=+897.757447681 I0325 17:09:28.730829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:09:28.730855 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-25 17:09:28.730850033 +0000 UTC m=+897.757987966 I0325 17:09:28.747127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:09:28.747194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:09:28.747208 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-25 17:09:28.747202097 +0000 UTC m=+897.774340030 I0325 17:09:28.881937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:09:28.894430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-jbpbn" condition "Approved" to 2026-03-25 17:09:28.894415588 +0000 UTC m=+897.921553521 I0325 17:09:28.912842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-jbpbn" condition "Ready" to 2026-03-25 17:09:28.912826367 +0000 UTC m=+897.939964290 I0325 17:09:28.948492 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:09:28.948476202 +0000 UTC m=+897.975614135 I0325 17:09:28.983521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:09:28.983898 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:09:28.983891571 +0000 UTC m=+898.011029494 I0325 17:09:28.991094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:09:29.002103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:09:29.002462 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:09:29.002454154 +0000 UTC m=+898.029592087 I0325 17:13:17.177438 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-25 17:13:17.177412834 +0000 UTC m=+1126.204550767 I0325 17:13:17.177674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 17:13:17.177745 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-25 17:13:17.177731182 +0000 UTC m=+1126.204869145 I0325 17:13:17.197512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:13:17.197735 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-25 17:13:17.197717092 +0000 UTC m=+1126.224855115 I0325 17:13:17.259505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:13:17.294910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7nn2j" condition "Approved" to 2026-03-25 17:13:17.294893885 +0000 UTC m=+1126.322031818 I0325 17:13:17.323973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7nn2j" condition "Ready" to 2026-03-25 17:13:17.323961069 +0000 UTC m=+1126.351099002 I0325 17:13:17.350626 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:13:17.350611391 +0000 UTC m=+1126.377749314 I0325 17:13:17.379698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:13:17.380044 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:13:17.380037565 +0000 UTC m=+1126.407175498 I0325 17:13:17.397828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 17:13:17.398036 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 17:13:17.398029632 +0000 UTC m=+1126.425167555 I0325 17:13:17.403985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"