I0404 10:17:06.059959 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0404 10:17:06.060091 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0404 10:17:06.060220 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0404 10:17:06.064327 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0404 10:17:06.064677 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0404 10:17:06.064770 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0404 10:17:06.064943 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0404 10:17:06.067449 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0404 10:17:06.084984 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0404 10:17:06.085160 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0404 10:17:06.090578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0404 10:17:06.097671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0404 10:17:06.101474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0404 10:17:06.104338 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0404 10:17:06.104361 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0404 10:17:06.104463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0404 10:17:06.106274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0404 10:17:06.108016 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0404 10:17:06.109738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0404 10:17:06.115353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0404 10:17:06.119382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0404 10:17:06.123136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0404 10:17:06.124982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0404 10:17:06.126703 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0404 10:17:06.128251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0404 10:17:06.129924 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0404 10:17:06.129942 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0404 10:17:06.130014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0404 10:17:06.132118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0404 10:17:06.139482 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0404 10:17:06.143764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0404 10:17:06.147586 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0404 10:17:06.147635 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0404 10:17:06.150387 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.150744 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.151705 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.151788 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.172843 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.224757 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.244506 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.287622 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.290223 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:06.305896 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0404 10:17:19.329280 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-04 10:17:19.329262162 +0000 UTC m=+13.304517201 I0404 10:17:20.025988 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-04 10:17:20.025972552 +0000 UTC m=+14.001227571 I0404 10:17:20.026115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:17:20.026176 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-04 10:17:20.026168487 +0000 UTC m=+14.001423506 E0404 10:17:20.038324 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0404 10:17:20.038409 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-04 10:17:20.038401512 +0000 UTC m=+14.013656511 E0404 10:17:20.038433 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0404 10:17:20.042180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:17:20.042278 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-04 10:17:20.042269682 +0000 UTC m=+14.017524691 E0404 10:17:20.054497 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0404 10:17:20.054997 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0404 10:17:20.055093 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0404 10:17:20.055323 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0404 10:17:20.059858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:17:20.082775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8jmlg" condition "Approved" to 2026-04-04 10:17:20.082754894 +0000 UTC m=+14.058009933 I0404 10:17:20.098512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8jmlg" condition "Ready" to 2026-04-04 10:17:20.098492498 +0000 UTC m=+14.073747537 I0404 10:17:20.122569 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:17:20.122550138 +0000 UTC m=+14.097805147 I0404 10:17:20.141239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:17:25.055122 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:17:25.055104522 +0000 UTC m=+19.030359561 I0404 10:17:43.151095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:17:43.151131 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-04 10:17:43.151123305 +0000 UTC m=+37.126378314 I0404 10:17:43.151407 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-04 10:17:43.151374842 +0000 UTC m=+37.126629861 I0404 10:17:43.164173 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-04 10:17:43.16413923 +0000 UTC m=+37.139394239 I0404 10:17:43.169749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:17:43.170366 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-04 10:17:43.17035271 +0000 UTC m=+37.145607799 I0404 10:17:43.673392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:17:43.702194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7xtfb" condition "Approved" to 2026-04-04 10:17:43.702184327 +0000 UTC m=+37.677439326 I0404 10:17:43.734838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7xtfb" condition "Ready" to 2026-04-04 10:17:43.734825758 +0000 UTC m=+37.710080767 I0404 10:17:43.765702 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:17:43.765687562 +0000 UTC m=+37.740942561 I0404 10:17:43.791170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:17:43.865708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:19:26.121497 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:19:26.121590 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-04 10:19:26.121579505 +0000 UTC m=+140.096834534 I0404 10:19:26.121602 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-04 10:19:26.121579305 +0000 UTC m=+140.096834334 E0404 10:19:26.142026 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0404 10:19:26.142090 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-04 10:19:26.142081775 +0000 UTC m=+140.117336784 I0404 10:19:26.142133 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0404 10:19:26.144647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:19:26.144736 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-04 10:19:26.144725407 +0000 UTC m=+140.119980446 I0404 10:19:26.157819 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-04 10:19:26.15780819 +0000 UTC m=+140.133063189 I0404 10:19:26.157869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:19:26.157896 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-04 10:19:26.157888462 +0000 UTC m=+140.133143461 E0404 10:19:26.158278 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0404 10:19:26.158410 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0404 10:19:26.158460 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0404 10:19:26.158507 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0404 10:19:26.175518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:19:26.175628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:19:26.175673 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-04 10:19:26.175656245 +0000 UTC m=+140.150911284 I0404 10:19:26.417925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-x2q48" condition "Approved" to 2026-04-04 10:19:26.417907017 +0000 UTC m=+140.393162056 I0404 10:19:26.435539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-x2q48" condition "Ready" to 2026-04-04 10:19:26.435524769 +0000 UTC m=+140.410779808 I0404 10:19:26.583527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:19:26.613343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-bdg6r" condition "Approved" to 2026-04-04 10:19:26.613319373 +0000 UTC m=+140.588574402 I0404 10:19:26.637517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-bdg6r" condition "Ready" to 2026-04-04 10:19:26.637504029 +0000 UTC m=+140.612759038 I0404 10:19:26.664937 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:19:26.664924753 +0000 UTC m=+140.640179762 I0404 10:19:26.682891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:19:26.683169 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:19:26.683161579 +0000 UTC m=+140.658416588 I0404 10:19:26.700024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:19:31.158826 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:19:31.158811348 +0000 UTC m=+145.134066377 I0404 10:19:31.185368 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-x2q48" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:19:31.185356221 +0000 UTC m=+145.160611230 I0404 10:19:31.215446 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:19:31.215418419 +0000 UTC m=+145.190673418 I0404 10:19:31.242248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:19:31.291449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:22:04.516798 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-04-04 10:22:04.516783092 +0000 UTC m=+298.492038121 I0404 10:22:04.516996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:22:04.517032 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-04 10:22:04.517025568 +0000 UTC m=+298.492280607 I0404 10:22:04.535831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:22:04.535913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:22:04.535934 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-04 10:22:04.535924888 +0000 UTC m=+298.511179917 I0404 10:22:04.926372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:22:04.934050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-9kz4x" condition "Approved" to 2026-04-04 10:22:04.934024627 +0000 UTC m=+298.909279666 I0404 10:22:04.952294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-9kz4x" condition "Ready" to 2026-04-04 10:22:04.952271591 +0000 UTC m=+298.927526620 I0404 10:22:04.981099 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:22:04.981084603 +0000 UTC m=+298.956339632 I0404 10:22:04.997207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:22:04.997572 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:22:04.997565291 +0000 UTC m=+298.972820300 I0404 10:22:05.012844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:22:05.018971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:15.769006 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-04 10:23:15.768987913 +0000 UTC m=+369.744242942 I0404 10:23:15.769020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:23:15.769196 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-04 10:23:15.769162227 +0000 UTC m=+369.744417256 E0404 10:23:15.781865 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0404 10:23:15.781903 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-04 10:23:15.781897279 +0000 UTC m=+369.757152288 E0404 10:23:15.781941 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0404 10:23:15.786367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:15.786466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:23:15.786494 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-04 10:23:15.786487356 +0000 UTC m=+369.761742395 E0404 10:23:15.792552 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0404 10:23:15.792652 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0404 10:23:15.792684 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0404 10:23:15.792717 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0404 10:23:15.819169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:15.823602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rbp9x" condition "Approved" to 2026-04-04 10:23:15.823581203 +0000 UTC m=+369.798836242 I0404 10:23:15.835353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rbp9x" condition "Ready" to 2026-04-04 10:23:15.835337991 +0000 UTC m=+369.810593000 I0404 10:23:15.862630 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:23:15.862608241 +0000 UTC m=+369.837863280 I0404 10:23:15.879931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:15.921123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:20.793746 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:23:20.793727938 +0000 UTC m=+374.768982977 I0404 10:23:58.561730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:23:58.561771 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-04 10:23:58.561763706 +0000 UTC m=+412.537018715 I0404 10:23:58.561718 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-04 10:23:58.561700034 +0000 UTC m=+412.536955053 I0404 10:23:58.571529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:23:58.571570 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-04 10:23:58.571562929 +0000 UTC m=+412.546817928 I0404 10:23:58.572025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:23:58.572044 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-04 10:23:58.572040562 +0000 UTC m=+412.547295551 I0404 10:23:58.572344 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-04 10:23:58.572338279 +0000 UTC m=+412.547593278 I0404 10:23:58.572570 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-04 10:23:58.572561126 +0000 UTC m=+412.547816125 I0404 10:23:58.588611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:58.588680 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-04 10:23:58.588674453 +0000 UTC m=+412.563929452 I0404 10:23:58.606563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:58.610205 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-04 10:23:58.610190929 +0000 UTC m=+412.585445928 I0404 10:23:58.614597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:58.614701 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-04 10:23:58.614693746 +0000 UTC m=+412.589948745 I0404 10:23:58.806016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:58.806508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:59.045978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-thxbl" condition "Approved" to 2026-04-04 10:23:59.045965378 +0000 UTC m=+413.021220377 I0404 10:23:59.064993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-thxbl" condition "Ready" to 2026-04-04 10:23:59.06498199 +0000 UTC m=+413.040237009 I0404 10:23:59.074125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5jhtc" condition "Approved" to 2026-04-04 10:23:59.074113726 +0000 UTC m=+413.049368725 E0404 10:23:59.075261 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-77v8w\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0404 10:23:59.087422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5jhtc" condition "Ready" to 2026-04-04 10:23:59.08741098 +0000 UTC m=+413.062665989 I0404 10:23:59.112068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:23:59.154281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5ldq4" condition "Approved" to 2026-04-04 10:23:59.154270992 +0000 UTC m=+413.129526001 I0404 10:23:59.256022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5ldq4" condition "Ready" to 2026-04-04 10:23:59.256002064 +0000 UTC m=+413.231257073 I0404 10:23:59.568909 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-5jhtc" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-jrcj5" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0404 10:23:59.593956 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-thxbl" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-lxckx" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0404 10:23:59.967877 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:23:59.967864229 +0000 UTC m=+413.943119268 I0404 10:24:00.053795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tjxmc" condition "Approved" to 2026-04-04 10:24:00.053775852 +0000 UTC m=+414.029030891 I0404 10:24:00.105317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zj2vm" condition "Approved" to 2026-04-04 10:24:00.105303166 +0000 UTC m=+414.080558195 I0404 10:24:00.209727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:00.210102 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:00.210094118 +0000 UTC m=+414.185349157 I0404 10:24:00.258406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tjxmc" condition "Ready" to 2026-04-04 10:24:00.258381178 +0000 UTC m=+414.233636187 I0404 10:24:00.608535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zj2vm" condition "Ready" to 2026-04-04 10:24:00.60851864 +0000 UTC m=+414.583773689 I0404 10:24:01.298477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:01.347167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:01.447736 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:01.447717929 +0000 UTC m=+415.422972938 I0404 10:24:01.548582 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:01.5485656 +0000 UTC m=+415.523820639 I0404 10:24:01.698879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:01.699388 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:01.699380683 +0000 UTC m=+415.674635692 I0404 10:24:01.848164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:01.848571 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:01.848562054 +0000 UTC m=+415.823817063 I0404 10:24:02.298301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:02.571334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:02.571865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:02.572351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:06.706652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7whln-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:24:06.706683 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7whln-tls" condition "Issuing" to 2026-04-04 10:24:06.706676431 +0000 UTC m=+420.681931440 I0404 10:24:06.706925 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7whln-tls" condition "Ready" to 2026-04-04 10:24:06.706904318 +0000 UTC m=+420.682159347 I0404 10:24:06.730431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7whln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7whln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:06.730636 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7whln-tls" condition "Ready" to 2026-04-04 10:24:06.730620821 +0000 UTC m=+420.705875870 I0404 10:24:06.992524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7whln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7whln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:07.023955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7whln-6wrtk" condition "Approved" to 2026-04-04 10:24:07.023802829 +0000 UTC m=+420.999057838 I0404 10:24:07.043521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7whln-6wrtk" condition "Ready" to 2026-04-04 10:24:07.043509459 +0000 UTC m=+421.018764458 I0404 10:24:07.068485 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7whln-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:07.068472825 +0000 UTC m=+421.043727834 I0404 10:24:07.089571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7whln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7whln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:07.089867 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7whln-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:07.089858229 +0000 UTC m=+421.065113238 I0404 10:24:07.109361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7whln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7whln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:07.109761 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7whln-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:07.109752344 +0000 UTC m=+421.085007353 I0404 10:24:07.113252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7whln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7whln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:30.429971 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-04 10:24:30.429959954 +0000 UTC m=+444.405214953 I0404 10:24:30.430261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:24:30.430275 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-04 10:24:30.430272842 +0000 UTC m=+444.405527841 I0404 10:24:30.444777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:30.444875 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-04 10:24:30.444867279 +0000 UTC m=+444.420122288 I0404 10:24:30.746516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:24:30.836998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tl87w" condition "Approved" to 2026-04-04 10:24:30.836972247 +0000 UTC m=+444.812227276 I0404 10:24:30.863236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tl87w" condition "Ready" to 2026-04-04 10:24:30.863226108 +0000 UTC m=+444.838481107 I0404 10:24:30.898957 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:24:30.898946422 +0000 UTC m=+444.874201431 I0404 10:24:30.923428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:27:48.841151 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-04 10:27:48.841130763 +0000 UTC m=+642.816385792 I0404 10:27:48.841532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:27:48.841606 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-04 10:27:48.841596975 +0000 UTC m=+642.816851984 I0404 10:27:48.857458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:27:48.857516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:27:48.857531 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-04 10:27:48.85752441 +0000 UTC m=+642.832779419 I0404 10:27:49.093153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:27:49.100707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m62xv" condition "Approved" to 2026-04-04 10:27:49.1006939 +0000 UTC m=+643.075948909 I0404 10:27:49.121491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m62xv" condition "Ready" to 2026-04-04 10:27:49.12147628 +0000 UTC m=+643.096731319 I0404 10:27:49.151685 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:27:49.151673585 +0000 UTC m=+643.126928594 I0404 10:27:49.172079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:27:49.248469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:30:07.862002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:30:07.862049 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-04 10:30:07.862043793 +0000 UTC m=+781.837298782 I0404 10:30:07.862100 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-04 10:30:07.862082284 +0000 UTC m=+781.837337313 I0404 10:30:07.877163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:30:07.877245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:30:07.877268 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-04 10:30:07.877261156 +0000 UTC m=+781.852516165 I0404 10:30:08.163154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6qxm8" condition "Approved" to 2026-04-04 10:30:08.163140098 +0000 UTC m=+782.138395137 I0404 10:30:08.180772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6qxm8" condition "Ready" to 2026-04-04 10:30:08.180756823 +0000 UTC m=+782.156011852 I0404 10:30:08.208273 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:30:08.208260253 +0000 UTC m=+782.183515272 I0404 10:30:08.224039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:30:08.224459 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:30:08.224452392 +0000 UTC m=+782.199707401 I0404 10:30:08.244072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:31:08.088865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:31:08.088962 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-04 10:31:08.088952072 +0000 UTC m=+842.064207111 I0404 10:31:08.089783 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-04 10:31:08.089773572 +0000 UTC m=+842.065028611 I0404 10:31:08.105400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:31:08.105488 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-04 10:31:08.105479708 +0000 UTC m=+842.080734707 I0404 10:31:08.702645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:31:08.738498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rf46c" condition "Approved" to 2026-04-04 10:31:08.738484986 +0000 UTC m=+842.713740015 I0404 10:31:08.769214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rf46c" condition "Ready" to 2026-04-04 10:31:08.769205328 +0000 UTC m=+842.744460337 I0404 10:31:08.804115 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:31:08.804101029 +0000 UTC m=+842.779356038 I0404 10:31:08.826635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:31:08.826875 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:31:08.826870738 +0000 UTC m=+842.802125727 I0404 10:31:08.850420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:34:09.171678 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-04 10:34:09.171666933 +0000 UTC m=+1023.146921942 I0404 10:34:09.171902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0404 10:34:09.171980 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-04 10:34:09.171972412 +0000 UTC m=+1023.147227421 I0404 10:34:09.187853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:34:09.187964 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-04 10:34:09.187954485 +0000 UTC m=+1023.163209504 I0404 10:34:09.372782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:34:09.406930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-msx8w" condition "Approved" to 2026-04-04 10:34:09.40691355 +0000 UTC m=+1023.382168559 I0404 10:34:09.427067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-msx8w" condition "Ready" to 2026-04-04 10:34:09.42705595 +0000 UTC m=+1023.402310949 I0404 10:34:09.460584 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:34:09.460568748 +0000 UTC m=+1023.435823747 I0404 10:34:09.485601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:34:09.485948 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:34:09.485939934 +0000 UTC m=+1023.461194943 I0404 10:34:09.489232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:34:09.507283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0404 10:34:09.507696 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-04 10:34:09.507685126 +0000 UTC m=+1023.482940135