I0408 10:48:50.851646 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 10:48:50.851755 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 10:48:50.851827 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 10:48:50.857748 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 10:48:50.858117 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 10:48:50.858238 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 10:48:50.858407 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 10:48:50.860715 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 10:48:50.873521 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 10:48:50.879088 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 10:48:50.882265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 10:48:50.887458 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 10:48:50.887523 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 10:48:50.887709 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 10:48:50.890134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 10:48:50.892415 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 10:48:50.894382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 10:48:50.896225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 10:48:50.898018 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 10:48:50.899988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 10:48:50.906513 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 10:48:50.906614 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 10:48:50.906626 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 10:48:50.909199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 10:48:50.911649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 10:48:50.913920 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 10:48:50.915848 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 10:48:50.915869 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 10:48:50.915887 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 10:48:50.917624 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 10:48:50.919406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 10:48:50.921044 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 10:48:50.922766 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 10:48:50.928045 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:50.928076 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:50.928810 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:50.930405 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:50.943783 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:50.958661 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:50.972860 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:50.988305 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:51.007698 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:51.016553 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:02.345092 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 10:49:02.345075836 +0000 UTC m=+11.526375083 I0408 10:49:03.047197 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:49:03.04717865 +0000 UTC m=+12.228477927 I0408 10:49:03.047232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:03.047646 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 10:49:03.047625482 +0000 UTC m=+12.228924769 E0408 10:49:03.065664 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:49:03.065763 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 10:49:03.065751456 +0000 UTC m=+12.247050733 E0408 10:49:03.065794 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:49:03.073825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:03.073979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:03.074048 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 10:49:03.074003961 +0000 UTC m=+12.255303218 E0408 10:49:03.083538 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 10:49:03.083912 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:49:03.083999 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:49:03.085338 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 10:49:03.118794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ld9l9" condition "Approved" to 2026-04-08 10:49:03.11877749 +0000 UTC m=+12.300076777 I0408 10:49:03.134001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ld9l9" condition "Ready" to 2026-04-08 10:49:03.133985426 +0000 UTC m=+12.315284673 I0408 10:49:03.158478 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:03.158454425 +0000 UTC m=+12.339753702 I0408 10:49:03.182798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:03.183136 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:03.183127599 +0000 UTC m=+12.364426866 I0408 10:49:03.195643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:03.195949 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:03.195938723 +0000 UTC m=+12.377237980 I0408 10:49:03.197406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:08.084795 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:08.084775135 +0000 UTC m=+17.266074412 I0408 10:49:30.599611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:30.599670 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 10:49:30.599662533 +0000 UTC m=+39.780961770 I0408 10:49:30.599782 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 10:49:30.599756985 +0000 UTC m=+39.781056242 I0408 10:49:30.609714 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 10:49:30.609698595 +0000 UTC m=+39.790997852 I0408 10:49:30.626021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:30.630999 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 10:49:30.63098881 +0000 UTC m=+39.812288067 I0408 10:49:30.776994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:30.814491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zx8vd" condition "Approved" to 2026-04-08 10:49:30.8144737 +0000 UTC m=+39.995772957 I0408 10:49:30.850876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zx8vd" condition "Ready" to 2026-04-08 10:49:30.850860658 +0000 UTC m=+40.032159935 I0408 10:49:30.882088 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:30.882074683 +0000 UTC m=+40.063373940 I0408 10:49:30.906298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:30.969370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:43.661694 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 10:51:43.661647661 +0000 UTC m=+172.842946978 I0408 10:51:43.662069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:43.662165 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 10:51:43.662154033 +0000 UTC m=+172.843453310 E0408 10:51:43.767526 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:43.767619 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-08 10:51:43.767610803 +0000 UTC m=+172.948910060 I0408 10:51:43.767638 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:43.772195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:43.772283 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:43.772316 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 10:51:43.772306424 +0000 UTC m=+172.953605681 I0408 10:51:43.931302 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 10:51:43.931277233 +0000 UTC m=+173.112576510 I0408 10:51:43.931320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" E0408 10:51:43.931402 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 10:51:43.931407 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 10:51:43.931394866 +0000 UTC m=+173.112694153 E0408 10:51:43.931589 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:43.931637 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 10:51:43.931681 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 10:51:43.997409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:43.997519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:43.997558 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 10:51:43.997546222 +0000 UTC m=+173.178845499 I0408 10:51:45.054053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-bsrmn" condition "Approved" to 2026-04-08 10:51:45.054006935 +0000 UTC m=+174.235306212 I0408 10:51:45.424585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-wl7sk" condition "Approved" to 2026-04-08 10:51:45.424569721 +0000 UTC m=+174.605868998 I0408 10:51:45.429103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-bsrmn" condition "Ready" to 2026-04-08 10:51:45.429094997 +0000 UTC m=+174.610394264 I0408 10:51:45.510855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-wl7sk" condition "Ready" to 2026-04-08 10:51:45.510837126 +0000 UTC m=+174.692136383 I0408 10:51:45.660409 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:45.660395973 +0000 UTC m=+174.841695230 I0408 10:51:45.732702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:45.733280 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:45.733270312 +0000 UTC m=+174.914569609 I0408 10:51:45.909263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:48.932979 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:48.932927811 +0000 UTC m=+178.114227088 I0408 10:51:48.951874 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-wl7sk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:48.951852079 +0000 UTC m=+178.133151356 I0408 10:51:48.985828 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:48.985806925 +0000 UTC m=+178.167106202 I0408 10:51:49.010371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:49.010910 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:49.010899781 +0000 UTC m=+178.192199058 I0408 10:51:49.020018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:49.031407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:49.031407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:49.031798 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:49.03179 +0000 UTC m=+178.213089287 I0408 10:54:34.083508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-186.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:54:34.083591 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-186.nip.io-tls" condition "Issuing" to 2026-04-08 10:54:34.083570491 +0000 UTC m=+343.264869818 I0408 10:54:34.083978 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-186.nip.io-tls" condition "Ready" to 2026-04-08 10:54:34.083973501 +0000 UTC m=+343.265272748 I0408 10:54:34.101496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:54:34.101616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-186.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:54:34.101643 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-186.nip.io-tls" condition "Issuing" to 2026-04-08 10:54:34.101637368 +0000 UTC m=+343.282936625 I0408 10:54:34.260808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:54:34.274264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-186.nip.io-tls-47fzp" condition "Approved" to 2026-04-08 10:54:34.274248573 +0000 UTC m=+343.455547850 I0408 10:54:34.291532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-186.nip.io-tls-47fzp" condition "Ready" to 2026-04-08 10:54:34.291516331 +0000 UTC m=+343.472815618 I0408 10:54:34.325972 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-186.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:54:34.325953583 +0000 UTC m=+343.507252850 I0408 10:54:34.349558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:54:34.398525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:46.164440 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 10:55:46.164386219 +0000 UTC m=+415.345685536 I0408 10:55:46.164671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:46.164721 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 10:55:46.164708318 +0000 UTC m=+415.346007605 E0408 10:55:46.176134 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:55:46.176190 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 10:55:46.176179716 +0000 UTC m=+415.357478983 E0408 10:55:46.176256 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:55:46.178883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:46.178951 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 10:55:46.178945058 +0000 UTC m=+415.360244315 E0408 10:55:46.185125 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 10:55:46.185487 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:55:46.185533 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:55:46.185598 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 10:55:46.193945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:46.194056 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 10:55:46.194044381 +0000 UTC m=+415.375343658 I0408 10:55:46.198377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:46.199805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jz86n" condition "Approved" to 2026-04-08 10:55:46.199797281 +0000 UTC m=+415.381096548 I0408 10:55:46.211190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jz86n" condition "Ready" to 2026-04-08 10:55:46.211178307 +0000 UTC m=+415.392477564 I0408 10:55:46.239908 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:46.239887304 +0000 UTC m=+415.421186581 I0408 10:55:46.256445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:46.256841 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:46.256832305 +0000 UTC m=+415.438131592 I0408 10:55:46.275933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:46.279036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:51.185550 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:51.185538923 +0000 UTC m=+420.366838180 I0408 10:56:29.790605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:29.790672 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 10:56:29.790650882 +0000 UTC m=+458.971950129 I0408 10:56:29.790857 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 10:56:29.790835167 +0000 UTC m=+458.972134474 I0408 10:56:29.793443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:29.793479 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 10:56:29.793472696 +0000 UTC m=+458.974771943 I0408 10:56:29.793964 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 10:56:29.793959889 +0000 UTC m=+458.975259136 I0408 10:56:29.811184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:29.811275 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:56:29.811270462 +0000 UTC m=+458.992569699 I0408 10:56:29.812735 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 10:56:29.81271126 +0000 UTC m=+458.994010547 I0408 10:56:29.851683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:29.852642 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 10:56:29.852617285 +0000 UTC m=+459.033916562 I0408 10:56:29.852752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:29.852840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:29.852869 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:56:29.852862161 +0000 UTC m=+459.034161398 I0408 10:56:29.855635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:29.855721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:29.855745 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 10:56:29.855738286 +0000 UTC m=+459.037037543 I0408 10:56:29.989255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:30.001463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bl2k2" condition "Approved" to 2026-04-08 10:56:30.001446043 +0000 UTC m=+459.182745350 I0408 10:56:30.028715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bl2k2" condition "Ready" to 2026-04-08 10:56:30.028700457 +0000 UTC m=+459.209999734 I0408 10:56:30.065720 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:30.065701016 +0000 UTC m=+459.247000303 I0408 10:56:30.091699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0408 10:56:30.154580 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-sw725\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0408 10:56:30.188954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5v9pd" condition "Approved" to 2026-04-08 10:56:30.188938194 +0000 UTC m=+459.370237451 I0408 10:56:30.209734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5v9pd" condition "Ready" to 2026-04-08 10:56:30.209714499 +0000 UTC m=+459.391013786 I0408 10:56:30.243986 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:30.243969886 +0000 UTC m=+459.425269133 I0408 10:56:30.266983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:30.267755 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:30.267738078 +0000 UTC m=+459.449037365 I0408 10:56:30.468920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:30.469321 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:30.469309618 +0000 UTC m=+459.650608875 I0408 10:56:30.573868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:30.619583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:30.722584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:30.872973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c46q5" condition "Approved" to 2026-04-08 10:56:30.87295429 +0000 UTC m=+460.054253577 I0408 10:56:31.176373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c46q5" condition "Ready" to 2026-04-08 10:56:31.176300515 +0000 UTC m=+460.357599792 I0408 10:56:31.418893 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:31.41887835 +0000 UTC m=+460.600177597 I0408 10:56:31.519290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:31.519713 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:31.51970291 +0000 UTC m=+460.701002167 I0408 10:56:31.783373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:31.843796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:56.712144 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" condition "Ready" to 2026-04-08 10:56:56.712127433 +0000 UTC m=+485.893426680 I0408 10:56:56.712681 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:56.712698 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" condition "Issuing" to 2026-04-08 10:56:56.712694418 +0000 UTC m=+485.893993665 I0408 10:56:56.734241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:56.734355 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" condition "Ready" to 2026-04-08 10:56:56.734345995 +0000 UTC m=+485.915645262 I0408 10:56:56.904761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:56.934977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sw9gg-2xzbn" condition "Approved" to 2026-04-08 10:56:56.93496436 +0000 UTC m=+486.116263607 I0408 10:56:56.961623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sw9gg-2xzbn" condition "Ready" to 2026-04-08 10:56:56.961612448 +0000 UTC m=+486.142911705 I0408 10:56:57.016373 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:57.016355972 +0000 UTC m=+486.197655239 I0408 10:56:57.038069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:57.038437 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:57.03843003 +0000 UTC m=+486.219729287 I0408 10:56:57.227773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sw9gg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:23.573045 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 10:57:23.573032705 +0000 UTC m=+512.754331962 I0408 10:57:23.573132 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:57:23.573179 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 10:57:23.573168859 +0000 UTC m=+512.754468136 I0408 10:57:23.592264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:23.592348 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 10:57:23.592340827 +0000 UTC m=+512.773640084 I0408 10:57:23.764658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:23.807915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2hhxm" condition "Approved" to 2026-04-08 10:57:23.807901533 +0000 UTC m=+512.989200790 I0408 10:57:23.827187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2hhxm" condition "Ready" to 2026-04-08 10:57:23.827175995 +0000 UTC m=+513.008475252 I0408 10:57:23.857872 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:23.857859495 +0000 UTC m=+513.039158752 I0408 10:57:23.875961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:23.876244 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:23.876237033 +0000 UTC m=+513.057536280 I0408 10:57:23.896864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:23.897306 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:23.897296742 +0000 UTC m=+513.078596049 I0408 10:57:23.901086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:54.386277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:00:54.386345 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 11:00:54.386312502 +0000 UTC m=+723.567611799 I0408 11:00:54.386371 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 11:00:54.386352483 +0000 UTC m=+723.567651740 I0408 11:00:54.404562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:54.404696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:00:54.404754 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 11:00:54.404744531 +0000 UTC m=+723.586043798 I0408 11:00:54.578709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:54.582629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xfhzj" condition "Approved" to 2026-04-08 11:00:54.582619937 +0000 UTC m=+723.763919194 I0408 11:00:54.602682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xfhzj" condition "Ready" to 2026-04-08 11:00:54.602668799 +0000 UTC m=+723.783968056 I0408 11:00:54.631168 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:00:54.63115289 +0000 UTC m=+723.812452177 I0408 11:00:54.651376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:54.651730 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:00:54.651724164 +0000 UTC m=+723.833023421 I0408 11:00:54.671572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:54.672050 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:00:54.672041483 +0000 UTC m=+723.853340750 I0408 11:03:30.658688 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 11:03:30.658656586 +0000 UTC m=+879.839955843 I0408 11:03:30.658737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:03:30.658911 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 11:03:30.658857071 +0000 UTC m=+879.840156388 I0408 11:03:30.677932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:30.678008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:03:30.678055 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 11:03:30.678047319 +0000 UTC m=+879.859346576 I0408 11:03:31.011274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:31.019588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-slq8z" condition "Approved" to 2026-04-08 11:03:31.01956289 +0000 UTC m=+880.200862167 I0408 11:03:31.038537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-slq8z" condition "Ready" to 2026-04-08 11:03:31.038523292 +0000 UTC m=+880.219822549 I0408 11:03:31.074519 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:03:31.074497465 +0000 UTC m=+880.255796712 I0408 11:03:31.093239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:31.093582 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:03:31.093575619 +0000 UTC m=+880.274874866 I0408 11:03:31.101825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:31.116434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:50.673903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:04:50.673961 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 11:04:50.673935489 +0000 UTC m=+959.855234746 I0408 11:04:50.674175 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 11:04:50.674160216 +0000 UTC m=+959.855459503 I0408 11:04:50.699942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:50.700127 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 11:04:50.700115616 +0000 UTC m=+959.881414903 I0408 11:04:50.810144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:50.844323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-tlwnm" condition "Approved" to 2026-04-08 11:04:50.844308048 +0000 UTC m=+960.025607325 I0408 11:04:50.866188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-tlwnm" condition "Ready" to 2026-04-08 11:04:50.866177292 +0000 UTC m=+960.047476549 I0408 11:04:50.906722 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:04:50.906705629 +0000 UTC m=+960.088004896 I0408 11:04:50.933425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:50.933706 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:04:50.933701065 +0000 UTC m=+960.115000312 I0408 11:04:50.937205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:50.957833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:50.958150 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:04:50.958141116 +0000 UTC m=+960.139440363 I0408 11:08:20.562020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:08:20.562124 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 11:08:20.562086972 +0000 UTC m=+1169.743386239 I0408 11:08:20.562220 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 11:08:20.562214525 +0000 UTC m=+1169.743513782 I0408 11:08:20.584141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:20.584240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:08:20.584267 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 11:08:20.584258681 +0000 UTC m=+1169.765557968 I0408 11:08:20.716174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w5vvx" condition "Approved" to 2026-04-08 11:08:20.71613023 +0000 UTC m=+1169.897429507 I0408 11:08:20.734549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w5vvx" condition "Ready" to 2026-04-08 11:08:20.734534702 +0000 UTC m=+1169.915833959 I0408 11:08:20.765764 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:08:20.765752992 +0000 UTC m=+1169.947052269 I0408 11:08:20.794462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:20.794779 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:08:20.794773476 +0000 UTC m=+1169.976072723 I0408 11:08:20.827824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"