I0420 10:45:37.809718 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 10:45:37.809849 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 10:45:37.809972 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 10:45:37.815163 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 10:45:37.815733 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 10:45:37.815771 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 10:45:37.815798 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 10:45:37.819354 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 10:45:37.838123 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 10:45:37.838413 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 10:45:37.842801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 10:45:37.846270 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 10:45:37.851465 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 10:45:37.851530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 10:45:37.854235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 10:45:37.856556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 10:45:37.858988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 10:45:37.860656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 10:45:37.862599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 10:45:37.865379 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 10:45:37.865397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 10:45:37.870727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 10:45:37.872996 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 10:45:37.875257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 10:45:37.877439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 10:45:37.879826 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 10:45:37.879847 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 10:45:37.879863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 10:45:37.879883 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 10:45:37.882289 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 10:45:37.884233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 10:45:37.886018 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 10:45:37.888320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 10:45:37.890760 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.896782 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.897254 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.897469 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.917397 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.927551 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.947263 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.963440 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.979587 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:37.981951 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:45:57.081625 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 10:45:57.080997162 +0000 UTC m=+19.302238468 I0420 10:45:57.966611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:45:57.966678 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:45:57.966655431 +0000 UTC m=+20.187896717 I0420 10:45:57.966947 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 10:45:57.966929586 +0000 UTC m=+20.188170892 I0420 10:45:58.000255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:45:58.000356 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 10:45:58.000348415 +0000 UTC m=+20.221589691 E0420 10:45:58.004161 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:45:58.004229 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 10:45:58.004216126 +0000 UTC m=+20.225457442 E0420 10:45:58.004309 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:45:58.027993 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 10:45:58.028110 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:45:58.028146 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:45:58.028190 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 10:45:58.033908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:45:58.085455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-95tsv" condition "Approved" to 2026-04-20 10:45:58.085436733 +0000 UTC m=+20.306678029 I0420 10:45:58.104953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-95tsv" condition "Ready" to 2026-04-20 10:45:58.104892912 +0000 UTC m=+20.326134198 I0420 10:45:58.157292 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:45:58.157277281 +0000 UTC m=+20.378518577 I0420 10:45:58.176572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:45:58.176845 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:45:58.176837772 +0000 UTC m=+20.398079048 I0420 10:45:58.202617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:45:58.207691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:03.029222 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:03.029193515 +0000 UTC m=+25.250434791 I0420 10:46:04.274923 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:46:04.274905164 +0000 UTC m=+26.496146450 I0420 10:46:04.275496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:46:04.275570 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:46:04.275562625 +0000 UTC m=+26.496803921 I0420 10:46:04.373227 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 10:46:04.373207807 +0000 UTC m=+26.594449113 I0420 10:46:04.378063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:04.378151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:46:04.378179 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:46:04.378171466 +0000 UTC m=+26.599412732 I0420 10:46:04.733980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2cx8w" condition "Approved" to 2026-04-20 10:46:04.733966259 +0000 UTC m=+26.955207535 I0420 10:46:04.807803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2cx8w" condition "Ready" to 2026-04-20 10:46:04.807783583 +0000 UTC m=+27.029024859 I0420 10:46:04.858954 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:04.858933852 +0000 UTC m=+27.080175168 I0420 10:46:04.912291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:04.912813 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:04.912795458 +0000 UTC m=+27.134036764 I0420 10:46:04.990073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:08.991966 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 10:46:08.991938416 +0000 UTC m=+31.213179702 I0420 10:46:08.992236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:46:08.992389 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:46:08.992377414 +0000 UTC m=+31.213618680 E0420 10:46:09.010003 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:46:09.010080 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 10:46:09.010070511 +0000 UTC m=+31.231311797 I0420 10:46:09.010134 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:46:09.017953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:09.018125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:46:09.018194 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:46:09.018183387 +0000 UTC m=+31.239424673 E0420 10:46:09.043894 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 10:46:09.049694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:46:09.049731 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 10:46:09.049722852 +0000 UTC m=+31.270964148 I0420 10:46:09.050528 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 10:46:09.050519917 +0000 UTC m=+31.271761203 E0420 10:46:09.057224 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:46:09.057293 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 10:46:09.057401 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 10:46:09.072574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:09.072730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:46:09.072774 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 10:46:09.072761876 +0000 UTC m=+31.294003192 I0420 10:46:09.522307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:09.538201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-54zts" condition "Approved" to 2026-04-20 10:46:09.538180635 +0000 UTC m=+31.759421931 I0420 10:46:09.546067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-dcbp9" condition "Approved" to 2026-04-20 10:46:09.546051757 +0000 UTC m=+31.767293043 I0420 10:46:09.573247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-54zts" condition "Ready" to 2026-04-20 10:46:09.573221844 +0000 UTC m=+31.794463130 I0420 10:46:09.577384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-dcbp9" condition "Ready" to 2026-04-20 10:46:09.577371469 +0000 UTC m=+31.798612745 I0420 10:46:09.626249 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:09.626235665 +0000 UTC m=+31.847476951 I0420 10:46:09.675470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:09.676700 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:09.67668621 +0000 UTC m=+31.897927516 I0420 10:46:09.709072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:14.045027 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:14.044990974 +0000 UTC m=+36.266232260 I0420 10:46:14.059731 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-54zts" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:14.059713308 +0000 UTC m=+36.280954604 I0420 10:46:14.095094 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:14.095077393 +0000 UTC m=+36.316318689 I0420 10:46:14.128112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:14.128455 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:46:14.1284466 +0000 UTC m=+36.349687886 I0420 10:46:14.150078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:46:14.155522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:42.749888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-19.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:42.750004 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready" to 2026-04-20 10:50:42.749896985 +0000 UTC m=+304.971138261 I0420 10:50:42.749937 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Issuing" to 2026-04-20 10:50:42.749925716 +0000 UTC m=+304.971167012 I0420 10:50:42.768471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:50:42.768539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-19.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:50:42.768557 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Issuing" to 2026-04-20 10:50:42.768549929 +0000 UTC m=+304.989791215 I0420 10:50:42.990826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-19.nip.io-tls-sgsxx" condition "Approved" to 2026-04-20 10:50:42.990800122 +0000 UTC m=+305.212041398 I0420 10:50:43.012822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-19.nip.io-tls-sgsxx" condition "Ready" to 2026-04-20 10:50:43.012808842 +0000 UTC m=+305.234050128 I0420 10:50:43.045641 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:50:43.04543573 +0000 UTC m=+305.266677006 I0420 10:50:43.067532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:51:55.798774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:51:55.798848 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 10:51:55.798776143 +0000 UTC m=+378.020017429 I0420 10:51:55.799311 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:51:55.798809954 +0000 UTC m=+378.020051230 I0420 10:51:55.809688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:51:55.810459 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 10:51:55.810448742 +0000 UTC m=+378.031690028 E0420 10:51:55.815631 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:51:55.815669 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 10:51:55.815661531 +0000 UTC m=+378.036902807 E0420 10:51:55.815728 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:51:55.826915 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 10:51:55.827611 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:51:55.828961 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:51:55.829185 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 10:51:55.833275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:51:55.855165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jf9bt" condition "Approved" to 2026-04-20 10:51:55.855152305 +0000 UTC m=+378.076393581 I0420 10:51:55.868383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jf9bt" condition "Ready" to 2026-04-20 10:51:55.86837028 +0000 UTC m=+378.089611566 I0420 10:51:55.892173 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:51:55.892159476 +0000 UTC m=+378.113400762 I0420 10:51:55.909739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:51:55.909974 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:51:55.909964229 +0000 UTC m=+378.131205505 I0420 10:51:55.929966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:00.828433 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:00.828363841 +0000 UTC m=+383.049605167 I0420 10:52:37.934019 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:52:37.933995331 +0000 UTC m=+420.155236607 I0420 10:52:37.935214 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:52:37.935266 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:52:37.935256683 +0000 UTC m=+420.156497989 I0420 10:52:37.936980 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:52:37.937025 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:52:37.937021113 +0000 UTC m=+420.158262399 I0420 10:52:37.940441 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:52:37.940422731 +0000 UTC m=+420.161664037 I0420 10:52:37.955691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:52:37.955716 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:52:37.955708323 +0000 UTC m=+420.176949599 I0420 10:52:37.955728 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 10:52:37.955721043 +0000 UTC m=+420.176962319 I0420 10:52:37.983338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:37.983426 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:52:37.983418108 +0000 UTC m=+420.204659394 I0420 10:52:37.984235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:37.985156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:52:37.985191 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:52:37.985184139 +0000 UTC m=+420.206425415 I0420 10:52:37.991781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:37.991840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:52:37.991868 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 10:52:37.991857443 +0000 UTC m=+420.213098719 I0420 10:52:38.279336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:38.279680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7t2gg" condition "Approved" to 2026-04-20 10:52:38.27965719 +0000 UTC m=+420.500898456 I0420 10:52:38.373919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7t2gg" condition "Ready" to 2026-04-20 10:52:38.373909847 +0000 UTC m=+420.595151123 I0420 10:52:38.395398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rqvpd" condition "Approved" to 2026-04-20 10:52:38.395389105 +0000 UTC m=+420.616630381 I0420 10:52:38.494538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rqvpd" condition "Ready" to 2026-04-20 10:52:38.494526256 +0000 UTC m=+420.715767532 I0420 10:52:38.522636 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:38.522623458 +0000 UTC m=+420.743864744 I0420 10:52:38.525711 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:38.525700581 +0000 UTC m=+420.746941857 I0420 10:52:38.547824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:38.548028 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:38.548022763 +0000 UTC m=+420.769264039 I0420 10:52:38.548741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:38.548900 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:38.548897598 +0000 UTC m=+420.770138874 I0420 10:52:38.551933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:38.585923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:38.586142 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:38.586135807 +0000 UTC m=+420.807377093 I0420 10:52:38.667444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:38.978404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vdksp" condition "Approved" to 2026-04-20 10:52:38.978385315 +0000 UTC m=+421.199626601 I0420 10:52:39.030946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vdksp" condition "Ready" to 2026-04-20 10:52:39.030930877 +0000 UTC m=+421.252172163 I0420 10:52:39.516888 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:39.516879034 +0000 UTC m=+421.738120310 I0420 10:52:39.615289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:45.173271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:52:45.176987 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" condition "Issuing" to 2026-04-20 10:52:45.176977533 +0000 UTC m=+427.398218799 I0420 10:52:45.173695 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" condition "Ready" to 2026-04-20 10:52:45.173679886 +0000 UTC m=+427.394921152 I0420 10:52:45.203050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:45.203598 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" condition "Ready" to 2026-04-20 10:52:45.20358199 +0000 UTC m=+427.424823266 I0420 10:52:45.631360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:45.672376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cmmbm-qdf7r" condition "Approved" to 2026-04-20 10:52:45.672322146 +0000 UTC m=+427.893563422 I0420 10:52:45.710423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cmmbm-qdf7r" condition "Ready" to 2026-04-20 10:52:45.71041499 +0000 UTC m=+427.931656256 I0420 10:52:45.799530 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:45.799518839 +0000 UTC m=+428.020760115 I0420 10:52:45.880176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:45.880577 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:45.88056614 +0000 UTC m=+428.101807426 I0420 10:52:45.912024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:45.913179 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cmmbm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:45.91317159 +0000 UTC m=+428.134412866 I0420 10:52:57.659888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:52:57.659919 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 10:52:57.659911342 +0000 UTC m=+439.881152608 I0420 10:52:57.660427 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:52:57.660422391 +0000 UTC m=+439.881663657 I0420 10:52:57.679364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:57.679448 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:52:57.679439068 +0000 UTC m=+439.900680354 I0420 10:52:57.908903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:57.946584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-96x62" condition "Approved" to 2026-04-20 10:52:57.946571499 +0000 UTC m=+440.167812775 I0420 10:52:57.965425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-96x62" condition "Ready" to 2026-04-20 10:52:57.965409163 +0000 UTC m=+440.186650449 I0420 10:52:57.997016 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:57.996999925 +0000 UTC m=+440.218241211 I0420 10:52:58.018775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:58.019063 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:58.019056754 +0000 UTC m=+440.240298030 I0420 10:52:58.034873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:52:58.035209 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:52:58.035202602 +0000 UTC m=+440.256443868 I0420 10:54:22.182421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:54:22.182458 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 10:54:22.182450256 +0000 UTC m=+524.403691532 I0420 10:54:22.183099 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:54:22.183093997 +0000 UTC m=+524.404335273 I0420 10:54:22.201297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:54:22.201560 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:54:22.201548846 +0000 UTC m=+524.422790152 I0420 10:54:22.860890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:54:22.899959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wds8z" condition "Approved" to 2026-04-20 10:54:22.899936218 +0000 UTC m=+525.121177534 I0420 10:54:22.923156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wds8z" condition "Ready" to 2026-04-20 10:54:22.92313172 +0000 UTC m=+525.144373026 I0420 10:54:22.958209 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:54:22.958194876 +0000 UTC m=+525.179436152 I0420 10:54:22.979099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:54:23.044136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:09.469397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:55:09.469435 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 10:55:09.469425651 +0000 UTC m=+571.690666937 I0420 10:55:09.469983 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-20 10:55:09.46997299 +0000 UTC m=+571.691214266 I0420 10:55:09.490721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:55:09.490861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:55:09.490901 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-20 10:55:09.490894593 +0000 UTC m=+571.712135879 I0420 10:55:09.737992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4j86j" condition "Approved" to 2026-04-20 10:55:09.737980572 +0000 UTC m=+571.959221858 I0420 10:55:09.762644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4j86j" condition "Ready" to 2026-04-20 10:55:09.762634509 +0000 UTC m=+571.983875795 I0420 10:55:09.790168 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:55:09.790156436 +0000 UTC m=+572.011397712 I0420 10:55:09.818239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"