I0407 17:53:54.573488 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 17:53:54.573639 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 17:53:54.573934 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 17:53:54.581247 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 17:53:54.581782 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 17:53:54.581804 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 17:53:54.581883 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 17:53:54.585594 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 17:53:54.603867 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 17:53:54.608366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 17:53:54.612464 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 17:53:54.612499 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 17:53:54.612607 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 17:53:54.618685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 17:53:54.622450 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 17:53:54.622499 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 17:53:54.626863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 17:53:54.631532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 17:53:54.634785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 17:53:54.636608 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 17:53:54.636786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 17:53:54.638577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 17:53:54.641452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 17:53:54.645066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 17:53:54.647328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 17:53:54.649437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 17:53:54.651286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 17:53:54.653325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 17:53:54.655143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 17:53:54.656822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 17:53:54.658734 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 17:53:54.658767 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 17:53:54.658775 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 17:53:54.661782 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.663644 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.664062 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.684078 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.701279 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.719026 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.743814 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.761029 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.776568 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:54.790298 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:54:14.575710 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 17:54:14.575693995 +0000 UTC m=+20.033759290 I0407 17:54:15.281978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:54:15.282013 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 17:54:15.28200582 +0000 UTC m=+20.740071075 I0407 17:54:15.282038 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 17:54:15.282020491 +0000 UTC m=+20.740085776 E0407 17:54:15.296451 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 17:54:15.296494 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 17:54:15.296486777 +0000 UTC m=+20.754552042 E0407 17:54:15.296535 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 17:54:15.300254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:54:15.300324 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 17:54:15.300315408 +0000 UTC m=+20.758380673 E0407 17:54:15.312528 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 17:54:15.312590 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 17:54:15.312611 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 17:54:15.312639 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 17:54:15.316043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:54:15.336761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4ddxt" condition "Approved" to 2026-04-07 17:54:15.336742687 +0000 UTC m=+20.794807992 I0407 17:54:15.349429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4ddxt" condition "Ready" to 2026-04-07 17:54:15.349415666 +0000 UTC m=+20.807480931 I0407 17:54:15.374345 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:54:15.374333892 +0000 UTC m=+20.832399157 I0407 17:54:15.391277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:54:15.391558 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:54:15.391551325 +0000 UTC m=+20.849616590 I0407 17:54:15.408368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:54:15.410717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:54:15.410973 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:54:15.410960457 +0000 UTC m=+20.869025722 I0407 17:54:20.313176 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:54:20.31316228 +0000 UTC m=+25.771227545 I0407 17:54:46.247342 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 17:54:46.247331164 +0000 UTC m=+51.705396419 I0407 17:54:46.247565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:54:46.247669 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 17:54:46.247658004 +0000 UTC m=+51.705723289 I0407 17:54:46.256720 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 17:54:46.256709319 +0000 UTC m=+51.714774584 I0407 17:54:46.265683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:54:46.266600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:54:46.266702 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 17:54:46.266693664 +0000 UTC m=+51.724758929 I0407 17:54:46.364240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:54:46.371248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-f5jqp" condition "Approved" to 2026-04-07 17:54:46.371236921 +0000 UTC m=+51.829302186 I0407 17:54:46.401710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-f5jqp" condition "Ready" to 2026-04-07 17:54:46.401698632 +0000 UTC m=+51.859763897 I0407 17:54:46.437961 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:54:46.437947515 +0000 UTC m=+51.896012790 I0407 17:54:46.492172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:54:46.543958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:13.836410 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 17:57:13.83639571 +0000 UTC m=+199.294460975 I0407 17:57:13.836664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:57:13.836748 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 17:57:13.836737081 +0000 UTC m=+199.294802366 E0407 17:57:13.852360 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 17:57:13.852420 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 17:57:13.852409224 +0000 UTC m=+199.310474489 I0407 17:57:13.852478 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 17:57:13.855854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:13.856110 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 17:57:13.85609634 +0000 UTC m=+199.314161635 E0407 17:57:13.862709 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 17:57:13.862823 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 17:57:13.862856 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 17:57:13.862901 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 17:57:13.866775 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 17:57:13.866754796 +0000 UTC m=+199.324820061 I0407 17:57:13.868187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:57:13.868233 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 17:57:13.868224532 +0000 UTC m=+199.326289777 I0407 17:57:13.882357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:13.882524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:57:13.882556 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 17:57:13.882547533 +0000 UTC m=+199.340612798 I0407 17:57:13.976686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:14.005858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-qdqz7" condition "Approved" to 2026-04-07 17:57:14.005841453 +0000 UTC m=+199.463906748 I0407 17:57:14.039444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-qdqz7" condition "Ready" to 2026-04-07 17:57:14.03942718 +0000 UTC m=+199.497492475 I0407 17:57:14.067925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:14.068705 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:14.068692971 +0000 UTC m=+199.526758236 I0407 17:57:14.075688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-s26jx" condition "Approved" to 2026-04-07 17:57:14.075681231 +0000 UTC m=+199.533746496 I0407 17:57:14.083374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:14.083662 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:14.083654092 +0000 UTC m=+199.541719367 I0407 17:57:14.092391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-s26jx" condition "Ready" to 2026-04-07 17:57:14.092377146 +0000 UTC m=+199.550442411 I0407 17:57:14.101086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:18.863288 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:18.863273452 +0000 UTC m=+204.321338747 I0407 17:57:18.882803 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-s26jx" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:18.882777566 +0000 UTC m=+204.340842851 I0407 17:57:18.915584 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:18.915566318 +0000 UTC m=+204.373631593 I0407 17:57:18.933029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:18.933324 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:18.933316537 +0000 UTC m=+204.391381792 I0407 17:57:18.949678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:51.798676 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Ready" to 2026-04-07 17:59:51.798658234 +0000 UTC m=+357.256723529 I0407 17:59:51.798899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-91.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:51.798981 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Issuing" to 2026-04-07 17:59:51.798965854 +0000 UTC m=+357.257031149 I0407 17:59:51.816462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:51.816664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-91.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:51.816732 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Issuing" to 2026-04-07 17:59:51.816690263 +0000 UTC m=+357.274755558 I0407 17:59:52.056667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:52.064554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-91.nip.io-tls-nk2vg" condition "Approved" to 2026-04-07 17:59:52.06453776 +0000 UTC m=+357.522603015 I0407 17:59:52.085597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-91.nip.io-tls-nk2vg" condition "Ready" to 2026-04-07 17:59:52.085579104 +0000 UTC m=+357.543644389 I0407 17:59:52.109739 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-91.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:52.109719945 +0000 UTC m=+357.567785240 I0407 17:59:52.137313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-91.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-91.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:01:18.765668 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 18:01:18.765651451 +0000 UTC m=+444.223716716 I0407 18:01:18.765735 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:01:18.765800 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 18:01:18.765758084 +0000 UTC m=+444.223823379 E0407 18:01:18.777288 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 18:01:18.777532 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 18:01:18.777516595 +0000 UTC m=+444.235581910 E0407 18:01:18.777663 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 18:01:18.779748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:01:18.780100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:01:18.780138 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 18:01:18.780128737 +0000 UTC m=+444.238194032 E0407 18:01:18.788084 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 18:01:18.788657 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 18:01:18.788705 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 18:01:18.788821 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 18:01:18.812713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:01:18.815713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2hg64" condition "Approved" to 2026-04-07 18:01:18.815698469 +0000 UTC m=+444.273763764 I0407 18:01:18.828727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2hg64" condition "Ready" to 2026-04-07 18:01:18.828709939 +0000 UTC m=+444.286775234 I0407 18:01:18.849030 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:01:18.848965468 +0000 UTC m=+444.307030763 I0407 18:01:18.865886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:01:18.866357 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:01:18.866347366 +0000 UTC m=+444.324412661 I0407 18:01:18.881546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:01:18.881873 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:01:18.881863255 +0000 UTC m=+444.339928520 I0407 18:01:23.788673 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:01:23.788657186 +0000 UTC m=+449.246722481 I0407 18:02:03.019501 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 18:02:03.01949013 +0000 UTC m=+488.477555385 I0407 18:02:03.019837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:02:03.019877 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 18:02:03.019873732 +0000 UTC m=+488.477938987 I0407 18:02:03.026760 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 18:02:03.026752889 +0000 UTC m=+488.484818144 I0407 18:02:03.026970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:02:03.026992 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 18:02:03.026988596 +0000 UTC m=+488.485053851 I0407 18:02:03.027237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:02:03.027271 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 18:02:03.027267615 +0000 UTC m=+488.485332870 I0407 18:02:03.027547 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 18:02:03.027542484 +0000 UTC m=+488.485607739 I0407 18:02:03.051322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:03.051377 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 18:02:03.051370297 +0000 UTC m=+488.509435552 I0407 18:02:03.056213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:03.056284 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 18:02:03.056278542 +0000 UTC m=+488.514343807 I0407 18:02:03.056336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:03.056484 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 18:02:03.056475918 +0000 UTC m=+488.514541183 I0407 18:02:03.169519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:03.180314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:03.205872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gt8qw" condition "Approved" to 2026-04-07 18:02:03.205856376 +0000 UTC m=+488.663921661 I0407 18:02:03.216957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mcl67" condition "Approved" to 2026-04-07 18:02:03.216945596 +0000 UTC m=+488.675010861 I0407 18:02:03.222584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gt8qw" condition "Ready" to 2026-04-07 18:02:03.222573554 +0000 UTC m=+488.680638819 I0407 18:02:03.261063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mcl67" condition "Ready" to 2026-04-07 18:02:03.261047439 +0000 UTC m=+488.719112724 I0407 18:02:03.331561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:02:03.331604 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 18:02:03.331595687 +0000 UTC m=+488.789660962 I0407 18:02:03.357958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:02:03.357984 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 18:02:03.357979241 +0000 UTC m=+488.816044486 I0407 18:02:03.373745 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:03.373729078 +0000 UTC m=+488.831794333 I0407 18:02:03.374315 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:03.374302566 +0000 UTC m=+488.832367821 I0407 18:02:03.390424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:03.624635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:03.625254 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:03.625242801 +0000 UTC m=+489.083308086 I0407 18:02:03.674258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:03.674592 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:03.674584289 +0000 UTC m=+489.132649554 I0407 18:02:03.765387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:04.062613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m87zk" condition "Approved" to 2026-04-07 18:02:04.062593814 +0000 UTC m=+489.520659099 I0407 18:02:04.063053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:04.064068 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:04.063990939 +0000 UTC m=+489.522056224 I0407 18:02:04.171010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lgbhk" condition "Approved" to 2026-04-07 18:02:04.170991468 +0000 UTC m=+489.629056753 I0407 18:02:04.524479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m87zk" condition "Ready" to 2026-04-07 18:02:04.524443182 +0000 UTC m=+489.982508467 I0407 18:02:04.566734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:04.737520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lgbhk" condition "Ready" to 2026-04-07 18:02:04.737507051 +0000 UTC m=+490.195572306 I0407 18:02:05.573907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7hxwl" condition "Approved" to 2026-04-07 18:02:05.573893678 +0000 UTC m=+491.031958933 E0407 18:02:05.837388 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-j2nds\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0407 18:02:05.873856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7hxwl" condition "Ready" to 2026-04-07 18:02:05.873840282 +0000 UTC m=+491.331905567 I0407 18:02:06.010856 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:06.01055073 +0000 UTC m=+491.468616025 I0407 18:02:06.679927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:06.680569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:06.680773 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:06.680756978 +0000 UTC m=+492.138822243 I0407 18:02:07.237730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:07.239125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:07.639683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:07.639683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:08.171377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:29.698765 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" condition "Ready" to 2026-04-07 18:02:29.698743753 +0000 UTC m=+515.156809048 I0407 18:02:29.698787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:02:29.698946 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" condition "Issuing" to 2026-04-07 18:02:29.698936259 +0000 UTC m=+515.157001524 I0407 18:02:29.714737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:29.714839 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" condition "Ready" to 2026-04-07 18:02:29.714829821 +0000 UTC m=+515.172895116 I0407 18:02:29.944751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:29.980311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9xxgz-2j879" condition "Approved" to 2026-04-07 18:02:29.980276445 +0000 UTC m=+515.438341700 I0407 18:02:30.003032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9xxgz-2j879" condition "Ready" to 2026-04-07 18:02:30.003020093 +0000 UTC m=+515.461085358 I0407 18:02:30.029991 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:30.029973855 +0000 UTC m=+515.488039110 I0407 18:02:30.045120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:02:30.045465 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:02:30.045459643 +0000 UTC m=+515.503524898 I0407 18:02:30.072368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9xxgz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:03:08.533543 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 18:03:08.533472702 +0000 UTC m=+553.991537997 I0407 18:03:08.533574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:03:08.533818 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 18:03:08.533809373 +0000 UTC m=+553.991874638 I0407 18:03:08.550378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:03:08.550505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:03:08.550539 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 18:03:08.550531731 +0000 UTC m=+554.008596996 I0407 18:03:08.908373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z6vx2" condition "Approved" to 2026-04-07 18:03:08.908351709 +0000 UTC m=+554.366417004 I0407 18:03:08.953566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z6vx2" condition "Ready" to 2026-04-07 18:03:08.953556488 +0000 UTC m=+554.411621743 I0407 18:03:08.981448 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:03:08.98143291 +0000 UTC m=+554.439498175 I0407 18:03:09.005620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:03:09.006140 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:03:09.00612596 +0000 UTC m=+554.464191255 I0407 18:03:09.023712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:06:26.967252 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 18:06:26.967230976 +0000 UTC m=+752.425296261 I0407 18:06:26.967317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:06:26.967646 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 18:06:26.967620368 +0000 UTC m=+752.425685663 I0407 18:06:26.986563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:06:26.987008 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 18:06:26.98699485 +0000 UTC m=+752.445060145 I0407 18:06:27.143973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:06:27.179049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qk95s" condition "Approved" to 2026-04-07 18:06:27.179030356 +0000 UTC m=+752.637095641 I0407 18:06:27.198860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qk95s" condition "Ready" to 2026-04-07 18:06:27.198846912 +0000 UTC m=+752.656912177 I0407 18:06:27.232840 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:06:27.232821885 +0000 UTC m=+752.690887180 I0407 18:06:27.253237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:06:27.253675 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:06:27.253667174 +0000 UTC m=+752.711732439 I0407 18:06:27.276631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:09:07.292140 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 18:09:07.29212045 +0000 UTC m=+912.750185735 I0407 18:09:07.292181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:09:07.292248 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 18:09:07.292241344 +0000 UTC m=+912.750306599 I0407 18:09:07.308947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:09:07.309023 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 18:09:07.309016483 +0000 UTC m=+912.767081738 I0407 18:09:07.534496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:09:07.566843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-j9798" condition "Approved" to 2026-04-07 18:09:07.566827909 +0000 UTC m=+913.024893204 I0407 18:09:07.591637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-j9798" condition "Ready" to 2026-04-07 18:09:07.591624072 +0000 UTC m=+913.049689337 I0407 18:09:07.625845 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:09:07.62582411 +0000 UTC m=+913.083889365 I0407 18:09:07.644310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:09:07.644745 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:09:07.644735217 +0000 UTC m=+913.102800502 I0407 18:09:07.666709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:10:21.824237 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 18:10:21.824227027 +0000 UTC m=+987.282292302 I0407 18:10:21.824561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:10:21.824576 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 18:10:21.824572158 +0000 UTC m=+987.282637423 I0407 18:10:21.840410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:10:21.840563 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 18:10:21.840553011 +0000 UTC m=+987.298618286 I0407 18:10:21.936738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:10:21.963619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-c8rfj" condition "Approved" to 2026-04-07 18:10:21.963604249 +0000 UTC m=+987.421669524 I0407 18:10:21.982544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-c8rfj" condition "Ready" to 2026-04-07 18:10:21.982531915 +0000 UTC m=+987.440597180 I0407 18:10:22.006352 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:10:22.006337705 +0000 UTC m=+987.464402960 I0407 18:10:22.034096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:13:34.875436 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 18:13:34.875413796 +0000 UTC m=+1180.333479091 I0407 18:13:34.875940 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:13:34.876182 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 18:13:34.87616909 +0000 UTC m=+1180.334234445 I0407 18:13:34.891033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:13:34.891146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:13:34.891177 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 18:13:34.891169414 +0000 UTC m=+1180.349234679 I0407 18:13:35.435514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:13:35.451018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-d9s66" condition "Approved" to 2026-04-07 18:13:35.451004004 +0000 UTC m=+1180.909069289 I0407 18:13:35.471184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-d9s66" condition "Ready" to 2026-04-07 18:13:35.47117302 +0000 UTC m=+1180.929238275 I0407 18:13:35.500494 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:13:35.500478515 +0000 UTC m=+1180.958543780 I0407 18:13:35.529071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:13:35.529532 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:13:35.529525132 +0000 UTC m=+1180.987590397 I0407 18:13:35.538124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:13:35.560437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:13:35.560872 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:13:35.560861811 +0000 UTC m=+1181.018927076