I0307 21:41:05.737971 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0307 21:41:05.738110 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0307 21:41:05.738332 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0307 21:41:05.742062 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0307 21:41:05.742511 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0307 21:41:05.742662 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0307 21:41:05.742743 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0307 21:41:05.745252 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0307 21:41:05.762046 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0307 21:41:05.769654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0307 21:41:05.773334 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0307 21:41:05.773500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0307 21:41:05.776397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0307 21:41:05.780653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0307 21:41:05.782757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0307 21:41:05.784731 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0307 21:41:05.789543 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0307 21:41:05.789587 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0307 21:41:05.789631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0307 21:41:05.791946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0307 21:41:05.794130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0307 21:41:05.796507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0307 21:41:05.799334 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0307 21:41:05.801838 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0307 21:41:05.801875 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0307 21:41:05.804491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0307 21:41:05.806910 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0307 21:41:05.806954 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0307 21:41:05.807010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0307 21:41:05.811504 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0307 21:41:05.816578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0307 21:41:05.820575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0307 21:41:05.822693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0307 21:41:05.824697 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.825477 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.826400 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.826389 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.826748 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.826924 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.827180 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.827246 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.827629 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:05.864006 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0307 21:41:21.602135 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-07 21:41:21.602098623 +0000 UTC m=+15.907287832 I0307 21:41:22.277888 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-07 21:41:22.277872904 +0000 UTC m=+16.583062103 I0307 21:41:22.278111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:41:22.278177 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-07 21:41:22.278168912 +0000 UTC m=+16.583358121 E0307 21:41:22.291601 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0307 21:41:22.291702 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-07 21:41:22.291692689 +0000 UTC m=+16.596881888 E0307 21:41:22.291736 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0307 21:41:22.294642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:41:22.294832 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-07 21:41:22.294819404 +0000 UTC m=+16.600008613 E0307 21:41:22.302243 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0307 21:41:22.302343 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0307 21:41:22.302382 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0307 21:41:22.302429 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0307 21:41:22.313830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:41:22.333277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pl297" condition "Approved" to 2026-03-07 21:41:22.333265408 +0000 UTC m=+16.638454587 I0307 21:41:22.346183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pl297" condition "Ready" to 2026-03-07 21:41:22.346170979 +0000 UTC m=+16.651360158 I0307 21:41:22.370111 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:41:22.370098898 +0000 UTC m=+16.675288077 I0307 21:41:22.387932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:41:22.388236 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:41:22.388230401 +0000 UTC m=+16.693419570 I0307 21:41:22.404344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:41:22.405556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:41:22.405866 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:41:22.40585767 +0000 UTC m=+16.711046849 I0307 21:41:27.302955 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:41:27.302940186 +0000 UTC m=+21.608129385 I0307 21:41:46.872223 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-07 21:41:46.872207334 +0000 UTC m=+41.177396513 I0307 21:41:46.872406 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:41:46.872516 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-07 21:41:46.872503693 +0000 UTC m=+41.177692892 I0307 21:41:46.885559 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-07 21:41:46.885546024 +0000 UTC m=+41.190735203 I0307 21:41:46.900150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:41:46.900230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:41:46.900261 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-07 21:41:46.90025177 +0000 UTC m=+41.205440979 I0307 21:41:47.112989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j5jpg" condition "Approved" to 2026-03-07 21:41:47.11297737 +0000 UTC m=+41.418166549 I0307 21:41:47.147522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j5jpg" condition "Ready" to 2026-03-07 21:41:47.147504821 +0000 UTC m=+41.452694020 I0307 21:41:47.185048 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:41:47.185034042 +0000 UTC m=+41.490223231 I0307 21:41:47.214039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:41:47.214457 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:41:47.214449505 +0000 UTC m=+41.519638674 I0307 21:41:47.240379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:33.269652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:43:33.269710 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-07 21:43:33.269695768 +0000 UTC m=+147.574884977 I0307 21:43:33.269708 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-07 21:43:33.269672257 +0000 UTC m=+147.574861456 E0307 21:43:33.283158 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0307 21:43:33.283245 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-07 21:43:33.283234346 +0000 UTC m=+147.588423545 I0307 21:43:33.283330 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0307 21:43:33.286942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:33.287003 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-07 21:43:33.286995687 +0000 UTC m=+147.592184866 E0307 21:43:33.294731 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0307 21:43:33.294812 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0307 21:43:33.294840 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0307 21:43:33.294871 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0307 21:43:33.294887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:43:33.294914 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-07 21:43:33.294906702 +0000 UTC m=+147.600095881 I0307 21:43:33.295080 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-07 21:43:33.295069747 +0000 UTC m=+147.600258926 I0307 21:43:33.311492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:33.311590 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-07 21:43:33.311581745 +0000 UTC m=+147.616770944 I0307 21:43:33.422647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:33.455187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-qf6vh" condition "Approved" to 2026-03-07 21:43:33.455166769 +0000 UTC m=+147.760355968 I0307 21:43:33.466845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:33.490808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-qf6vh" condition "Ready" to 2026-03-07 21:43:33.490788146 +0000 UTC m=+147.795977355 I0307 21:43:33.503690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cmdr8" condition "Approved" to 2026-03-07 21:43:33.503663435 +0000 UTC m=+147.808852614 I0307 21:43:33.520423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cmdr8" condition "Ready" to 2026-03-07 21:43:33.520410959 +0000 UTC m=+147.825600148 I0307 21:43:33.525692 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:43:33.525674781 +0000 UTC m=+147.830863990 I0307 21:43:33.545623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:33.546503 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:43:33.546488647 +0000 UTC m=+147.851677856 I0307 21:43:33.555644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:33.565417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:38.295764 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:43:38.295740606 +0000 UTC m=+152.600929815 I0307 21:43:38.312065 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-cmdr8" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:43:38.312053298 +0000 UTC m=+152.617242477 I0307 21:43:38.338091 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:43:38.338074914 +0000 UTC m=+152.643264123 I0307 21:43:38.357687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:43:38.403171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:46:10.261088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:46:10.261143 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Issuing" to 2026-03-07 21:46:10.261132768 +0000 UTC m=+304.566321977 I0307 21:46:10.261089 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Ready" to 2026-03-07 21:46:10.261050326 +0000 UTC m=+304.566239525 I0307 21:46:10.282527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:46:10.282583 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Ready" to 2026-03-07 21:46:10.282577773 +0000 UTC m=+304.587766942 I0307 21:46:10.559575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:46:10.596020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-227.nip.io-tls-tq7gx" condition "Approved" to 2026-03-07 21:46:10.596006211 +0000 UTC m=+304.901195410 I0307 21:46:10.613454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-227.nip.io-tls-tq7gx" condition "Ready" to 2026-03-07 21:46:10.613439526 +0000 UTC m=+304.918628725 I0307 21:46:10.636188 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:46:10.636164965 +0000 UTC m=+304.941354164 I0307 21:46:10.653866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:46:10.654430 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:46:10.654417592 +0000 UTC m=+304.959606801 I0307 21:46:10.674266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:46:10.675785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:46:10.676302 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:46:10.676292349 +0000 UTC m=+304.981481558 I0307 21:47:19.241890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:47:19.241925 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-07 21:47:19.241876376 +0000 UTC m=+373.547065575 I0307 21:47:19.241935 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-07 21:47:19.241926057 +0000 UTC m=+373.547115216 E0307 21:47:19.255710 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0307 21:47:19.255754 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-07 21:47:19.255747211 +0000 UTC m=+373.560936380 E0307 21:47:19.255792 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0307 21:47:19.257081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:47:19.257171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:47:19.257195 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-07 21:47:19.25718696 +0000 UTC m=+373.562376169 E0307 21:47:19.263143 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0307 21:47:19.263860 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0307 21:47:19.263915 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0307 21:47:19.263966 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0307 21:47:19.293680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:47:19.298787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lzx86" condition "Approved" to 2026-03-07 21:47:19.298767943 +0000 UTC m=+373.603957152 I0307 21:47:19.313214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lzx86" condition "Ready" to 2026-03-07 21:47:19.313199013 +0000 UTC m=+373.618388222 I0307 21:47:19.334684 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:47:19.334669482 +0000 UTC m=+373.639858651 I0307 21:47:19.352585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:47:24.264590 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:47:24.264571225 +0000 UTC m=+378.569760424 I0307 21:48:00.758863 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-07 21:48:00.758825834 +0000 UTC m=+415.064015063 I0307 21:48:00.759195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:48:00.759218 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-07 21:48:00.759214196 +0000 UTC m=+415.064403375 I0307 21:48:00.759458 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-07 21:48:00.759454172 +0000 UTC m=+415.064643351 I0307 21:48:00.759523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:48:00.759583 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-07 21:48:00.759576285 +0000 UTC m=+415.064765454 I0307 21:48:00.759698 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:48:00.759719 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-07 21:48:00.759715949 +0000 UTC m=+415.064905128 I0307 21:48:00.759881 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-07 21:48:00.759877503 +0000 UTC m=+415.065066682 I0307 21:48:00.798102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:00.798167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:48:00.798191 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-07 21:48:00.79818526 +0000 UTC m=+415.103374429 I0307 21:48:00.799183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:00.799231 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-07 21:48:00.799226969 +0000 UTC m=+415.104416138 I0307 21:48:00.806297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:00.806397 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-07 21:48:00.80638618 +0000 UTC m=+415.111575379 I0307 21:48:00.936337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:00.951128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:00.972702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qlk5l" condition "Approved" to 2026-03-07 21:48:00.970341528 +0000 UTC m=+415.275530737 I0307 21:48:00.984858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x9wpc" condition "Approved" to 2026-03-07 21:48:00.984843287 +0000 UTC m=+415.290032496 I0307 21:48:00.999071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qlk5l" condition "Ready" to 2026-03-07 21:48:00.999059148 +0000 UTC m=+415.304248327 I0307 21:48:01.004526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x9wpc" condition "Ready" to 2026-03-07 21:48:01.004518704 +0000 UTC m=+415.309707903 I0307 21:48:01.023894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:01.038098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-66fnx" condition "Approved" to 2026-03-07 21:48:01.038085735 +0000 UTC m=+415.343274914 I0307 21:48:01.046390 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:01.046373687 +0000 UTC m=+415.351562866 I0307 21:48:01.047010 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:01.046997614 +0000 UTC m=+415.352186823 I0307 21:48:01.300232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-66fnx" condition "Ready" to 2026-03-07 21:48:01.300223035 +0000 UTC m=+415.605412204 I0307 21:48:01.493191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:01.493899 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:01.493887679 +0000 UTC m=+415.799076878 I0307 21:48:01.549675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:01.550037 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:01.550028135 +0000 UTC m=+415.855217314 I0307 21:48:01.902204 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:01.90218929 +0000 UTC m=+416.207378459 I0307 21:48:01.959151 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:01.959137727 +0000 UTC m=+416.264326906 I0307 21:48:01.997983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:02.093183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:02.165639 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:02.165624735 +0000 UTC m=+416.470813944 I0307 21:48:02.195685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:02.244187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:02.444230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:02.444590 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:02.444582006 +0000 UTC m=+416.749771195 I0307 21:48:02.645594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:09.236542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:48:09.236586 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls" condition "Issuing" to 2026-03-07 21:48:09.236574243 +0000 UTC m=+423.541763442 I0307 21:48:09.236535 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls" condition "Ready" to 2026-03-07 21:48:09.236518251 +0000 UTC m=+423.541707430 I0307 21:48:09.253959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:09.254069 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls" condition "Ready" to 2026-03-07 21:48:09.254055601 +0000 UTC m=+423.559244820 I0307 21:48:09.673478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:09.707880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ms4lc-tp599" condition "Approved" to 2026-03-07 21:48:09.707864652 +0000 UTC m=+424.013053831 I0307 21:48:09.731982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ms4lc-tp599" condition "Ready" to 2026-03-07 21:48:09.731953249 +0000 UTC m=+424.037142438 I0307 21:48:09.772494 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:09.772476745 +0000 UTC m=+424.077665924 I0307 21:48:09.789868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ms4lc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:36.012319 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-07 21:48:36.012299 +0000 UTC m=+450.317488199 I0307 21:48:36.012341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:48:36.012388 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-07 21:48:36.012378672 +0000 UTC m=+450.317567851 I0307 21:48:36.026771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:36.026871 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-07 21:48:36.02685884 +0000 UTC m=+450.332048049 I0307 21:48:36.267193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:36.293045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tg42t" condition "Approved" to 2026-03-07 21:48:36.293026109 +0000 UTC m=+450.598215288 I0307 21:48:36.313884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tg42t" condition "Ready" to 2026-03-07 21:48:36.313870997 +0000 UTC m=+450.619060196 I0307 21:48:36.347717 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:48:36.347696024 +0000 UTC m=+450.652885233 I0307 21:48:36.365585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:48:36.416509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:51:50.072344 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-07 21:51:50.072306321 +0000 UTC m=+644.377495540 I0307 21:51:50.072315 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:51:50.072517 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-07 21:51:50.072509827 +0000 UTC m=+644.377699006 I0307 21:51:50.092334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:51:50.092708 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-07 21:51:50.092691734 +0000 UTC m=+644.397880943 I0307 21:51:50.514100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:51:50.552471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hs4bk" condition "Approved" to 2026-03-07 21:51:50.552459685 +0000 UTC m=+644.857648864 I0307 21:51:50.572718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hs4bk" condition "Ready" to 2026-03-07 21:51:50.572707343 +0000 UTC m=+644.877896522 I0307 21:51:50.602638 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:51:50.602620625 +0000 UTC m=+644.907809834 I0307 21:51:50.622193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:51:50.622659 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:51:50.622652027 +0000 UTC m=+644.927841196 I0307 21:51:50.646034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:51:50.646826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:51:50.647200 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:51:50.647188313 +0000 UTC m=+644.952377482 I0307 21:54:17.365535 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-07 21:54:17.365515133 +0000 UTC m=+791.670704302 I0307 21:54:17.365864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:54:17.365966 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-07 21:54:17.365955755 +0000 UTC m=+791.671144954 I0307 21:54:17.381572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:54:17.381652 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-07 21:54:17.381645108 +0000 UTC m=+791.686834307 I0307 21:54:17.444145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:54:17.472431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-nwgh8" condition "Approved" to 2026-03-07 21:54:17.472417425 +0000 UTC m=+791.777606624 I0307 21:54:17.490250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-nwgh8" condition "Ready" to 2026-03-07 21:54:17.490238576 +0000 UTC m=+791.795427755 I0307 21:54:17.524042 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:54:17.524032207 +0000 UTC m=+791.829221386 I0307 21:54:17.543678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:54:17.544314 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:54:17.544304543 +0000 UTC m=+791.849493742 I0307 21:54:17.553874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:54:17.565328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:54:17.567313 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:54:17.567301713 +0000 UTC m=+791.872490892 I0307 21:54:17.571427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:55:24.772565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:55:24.772608 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-07 21:55:24.772597874 +0000 UTC m=+859.077787053 I0307 21:55:24.772870 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-07 21:55:24.7728447 +0000 UTC m=+859.078033899 I0307 21:55:24.798587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:55:24.798726 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-07 21:55:24.798716945 +0000 UTC m=+859.103906124 I0307 21:55:25.056036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:55:25.092267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-nm247" condition "Approved" to 2026-03-07 21:55:25.092251278 +0000 UTC m=+859.397440487 I0307 21:55:25.116687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-nm247" condition "Ready" to 2026-03-07 21:55:25.116672383 +0000 UTC m=+859.421861552 I0307 21:55:25.144898 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:55:25.14488336 +0000 UTC m=+859.450072539 I0307 21:55:25.176681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:55:25.177047 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:55:25.177038513 +0000 UTC m=+859.482227672 I0307 21:55:25.193808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:55:25.194129 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:55:25.194118821 +0000 UTC m=+859.499308000 I0307 21:55:25.199976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:58:33.980645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:58:33.980705 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-07 21:58:33.980674546 +0000 UTC m=+1048.285863715 I0307 21:58:33.980742 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-07 21:58:33.980723007 +0000 UTC m=+1048.285912206 I0307 21:58:34.006005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0307 21:58:34.006117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0307 21:58:34.006144 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-07 21:58:34.006137539 +0000 UTC m=+1048.311326718 I0307 21:58:34.340374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gpxzq" condition "Approved" to 2026-03-07 21:58:34.340360904 +0000 UTC m=+1048.645550083 I0307 21:58:34.365147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gpxzq" condition "Ready" to 2026-03-07 21:58:34.365128559 +0000 UTC m=+1048.670317768 I0307 21:58:34.392640 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-07 21:58:34.392621856 +0000 UTC m=+1048.697811055 I0307 21:58:34.414990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"