I0331 20:25:11.804501 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0331 20:25:11.804632 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0331 20:25:11.804721 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 20:25:11.809357 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0331 20:25:11.809876 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0331 20:25:11.809979 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0331 20:25:11.809980 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0331 20:25:11.813762 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 20:25:11.826479 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0331 20:25:11.832127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0331 20:25:11.835849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0331 20:25:11.838264 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0331 20:25:11.841216 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0331 20:25:11.844104 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0331 20:25:11.844155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0331 20:25:11.846903 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0331 20:25:11.848838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0331 20:25:11.854355 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0331 20:25:11.858122 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0331 20:25:11.858235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0331 20:25:11.860064 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0331 20:25:11.860246 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0331 20:25:11.861979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0331 20:25:11.863908 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0331 20:25:11.865626 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0331 20:25:11.868565 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0331 20:25:11.871324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0331 20:25:11.875439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0331 20:25:11.879758 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0331 20:25:11.879885 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0331 20:25:11.882778 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0331 20:25:11.882801 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0331 20:25:11.883156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0331 20:25:11.885733 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.886113 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.886211 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.886347 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.906577 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.922783 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.933406 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.951319 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.968812 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:11.969952 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:25:24.129147 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-31 20:25:24.129130746 +0000 UTC m=+12.355968707 I0331 20:25:24.863919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:25:24.863996 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-31 20:25:24.863986088 +0000 UTC m=+13.090824059 I0331 20:25:24.864067 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 20:25:24.86404876 +0000 UTC m=+13.090886721 E0331 20:25:24.881596 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 20:25:24.881660 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-31 20:25:24.881652772 +0000 UTC m=+13.108490703 E0331 20:25:24.881684 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 20:25:24.885614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:25:24.885670 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 20:25:24.885662608 +0000 UTC m=+13.112500559 E0331 20:25:24.896217 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0331 20:25:24.896498 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 20:25:24.896603 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 20:25:24.896665 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0331 20:25:24.902532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:25:24.902661 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 20:25:24.902650786 +0000 UTC m=+13.129488727 I0331 20:25:24.906543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:25:24.912931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-frpj7" condition "Approved" to 2026-03-31 20:25:24.912922212 +0000 UTC m=+13.139760153 I0331 20:25:24.924880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-frpj7" condition "Ready" to 2026-03-31 20:25:24.924867919 +0000 UTC m=+13.151705860 I0331 20:25:24.947762 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:25:24.947751828 +0000 UTC m=+13.174589769 I0331 20:25:24.966057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:25:29.897515 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:25:29.897490521 +0000 UTC m=+18.124328482 I0331 20:25:50.809544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:25:50.809576 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-31 20:25:50.809569071 +0000 UTC m=+39.036407012 I0331 20:25:50.809967 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-31 20:25:50.80995099 +0000 UTC m=+39.036788961 I0331 20:25:50.822945 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-31 20:25:50.822929301 +0000 UTC m=+39.049767262 I0331 20:25:50.842315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:25:50.842410 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-31 20:25:50.842402199 +0000 UTC m=+39.069240140 I0331 20:25:51.207698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:25:51.239592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hxrdk" condition "Approved" to 2026-03-31 20:25:51.239579397 +0000 UTC m=+39.466417338 I0331 20:25:51.273648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hxrdk" condition "Ready" to 2026-03-31 20:25:51.273631424 +0000 UTC m=+39.500469395 I0331 20:25:51.304660 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:25:51.304639809 +0000 UTC m=+39.531477790 I0331 20:25:51.328265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:48.454748 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-31 20:27:48.454726843 +0000 UTC m=+156.681564814 I0331 20:27:48.454891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:27:48.454936 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-31 20:27:48.454925017 +0000 UTC m=+156.681762978 E0331 20:27:48.469802 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 20:27:48.469851 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-31 20:27:48.469844077 +0000 UTC m=+156.696682018 I0331 20:27:48.469901 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 20:27:48.471906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:48.472103 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-31 20:27:48.472089141 +0000 UTC m=+156.698927112 E0331 20:27:48.479139 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0331 20:27:48.479639 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 20:27:48.479684 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0331 20:27:48.479742 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0331 20:27:48.481555 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-31 20:27:48.481542689 +0000 UTC m=+156.708380660 I0331 20:27:48.481731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:27:48.481771 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-31 20:27:48.481763144 +0000 UTC m=+156.708601105 I0331 20:27:48.497856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:48.497930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:27:48.497950 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-31 20:27:48.497942684 +0000 UTC m=+156.724780625 I0331 20:27:48.590009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:48.617564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-xt2hv" condition "Approved" to 2026-03-31 20:27:48.617554036 +0000 UTC m=+156.844391967 I0331 20:27:48.647439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-xt2hv" condition "Ready" to 2026-03-31 20:27:48.647424456 +0000 UTC m=+156.874262407 I0331 20:27:48.651082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:48.666422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w6jkc" condition "Approved" to 2026-03-31 20:27:48.666406553 +0000 UTC m=+156.893244504 I0331 20:27:48.695894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w6jkc" condition "Ready" to 2026-03-31 20:27:48.695878833 +0000 UTC m=+156.922716774 I0331 20:27:48.696392 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:48.696378515 +0000 UTC m=+156.923216456 I0331 20:27:48.714059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:48.714307 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:48.714299017 +0000 UTC m=+156.941136958 I0331 20:27:48.724751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:48.732885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:53.479990 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:53.479974359 +0000 UTC m=+161.706812320 I0331 20:27:53.500901 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-w6jkc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:53.500883013 +0000 UTC m=+161.727720974 I0331 20:27:53.528074 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:53.528058088 +0000 UTC m=+161.754896049 I0331 20:27:53.547732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:53.548067 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:53.548059329 +0000 UTC m=+161.774897270 I0331 20:27:53.563933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:53.564380 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:53.564370513 +0000 UTC m=+161.791208474 I0331 20:30:26.177309 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready" to 2026-03-31 20:30:26.177261835 +0000 UTC m=+314.404099796 I0331 20:30:26.177314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:30:26.177501 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Issuing" to 2026-03-31 20:30:26.177483 +0000 UTC m=+314.404320961 I0331 20:30:26.199519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:30:26.199595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:30:26.199613 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Issuing" to 2026-03-31 20:30:26.199606011 +0000 UTC m=+314.426443972 I0331 20:30:26.430260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-dsphs" condition "Approved" to 2026-03-31 20:30:26.430250714 +0000 UTC m=+314.657088655 I0331 20:30:26.447691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-dsphs" condition "Ready" to 2026-03-31 20:30:26.447678262 +0000 UTC m=+314.674516203 I0331 20:30:26.474462 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:30:26.474449905 +0000 UTC m=+314.701287846 I0331 20:30:26.495181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:30:26.495744 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:30:26.495734656 +0000 UTC m=+314.722572617 I0331 20:30:26.502631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:30:26.512784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:30:26.513061 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:30:26.513052111 +0000 UTC m=+314.739890052 I0331 20:30:26.521561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:31:37.256291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:31:37.256323 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-31 20:31:37.256316528 +0000 UTC m=+385.483154469 I0331 20:31:37.256410 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-31 20:31:37.25638995 +0000 UTC m=+385.483227921 E0331 20:31:37.267304 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 20:31:37.267347 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-31 20:31:37.267339132 +0000 UTC m=+385.494177083 E0331 20:31:37.267396 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 20:31:37.269536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:31:37.269586 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-31 20:31:37.269581026 +0000 UTC m=+385.496418967 E0331 20:31:37.278956 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0331 20:31:37.279036 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 20:31:37.279062 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 20:31:37.279087 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0331 20:31:37.284906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:31:37.304847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bkrrn" condition "Approved" to 2026-03-31 20:31:37.304829271 +0000 UTC m=+385.531667242 I0331 20:31:37.317370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bkrrn" condition "Ready" to 2026-03-31 20:31:37.317355791 +0000 UTC m=+385.544193732 I0331 20:31:37.338815 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:31:37.338799965 +0000 UTC m=+385.565637936 I0331 20:31:37.354961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:31:37.355238 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:31:37.355228708 +0000 UTC m=+385.582066649 I0331 20:31:37.371372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:31:37.373199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:31:42.279749 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:31:42.279735085 +0000 UTC m=+390.506573056 I0331 20:32:20.368218 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-31 20:32:20.368194402 +0000 UTC m=+428.595032333 I0331 20:32:20.368745 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:20.368775 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-31 20:32:20.368771376 +0000 UTC m=+428.595609307 I0331 20:32:20.371462 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-31 20:32:20.371447059 +0000 UTC m=+428.598284990 I0331 20:32:20.371763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:20.371806 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 20:32:20.371799469 +0000 UTC m=+428.598637390 I0331 20:32:20.371822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:20.371847 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-31 20:32:20.37184333 +0000 UTC m=+428.598681261 I0331 20:32:20.372004 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-31 20:32:20.371998713 +0000 UTC m=+428.598836644 I0331 20:32:20.391045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:20.391151 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-31 20:32:20.391141102 +0000 UTC m=+428.617979033 I0331 20:32:20.402158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:20.402241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:20.402311 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-31 20:32:20.402300778 +0000 UTC m=+428.629138719 I0331 20:32:20.402374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:20.402409 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 20:32:20.402402912 +0000 UTC m=+428.629240853 I0331 20:32:20.575270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:20.610499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2xtfn" condition "Approved" to 2026-03-31 20:32:20.610483573 +0000 UTC m=+428.837321534 I0331 20:32:20.630387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2xtfn" condition "Ready" to 2026-03-31 20:32:20.630372749 +0000 UTC m=+428.857210700 I0331 20:32:20.660664 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:20.660652714 +0000 UTC m=+428.887490655 I0331 20:32:20.669684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:20.677585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2z5vk" condition "Approved" to 2026-03-31 20:32:20.677559349 +0000 UTC m=+428.904397310 I0331 20:32:20.688935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:20.696600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2z5vk" condition "Ready" to 2026-03-31 20:32:20.696588365 +0000 UTC m=+428.923426306 I0331 20:32:20.733531 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:20.733524209 +0000 UTC m=+428.960362140 I0331 20:32:20.803743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:20.852720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:21.005197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:21.305974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bw5gv" condition "Approved" to 2026-03-31 20:32:21.305952574 +0000 UTC m=+429.532790545 I0331 20:32:21.465473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bw5gv" condition "Ready" to 2026-03-31 20:32:21.465465024 +0000 UTC m=+429.692302955 I0331 20:32:21.753483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:21.964891 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:21.96487535 +0000 UTC m=+430.191713281 I0331 20:32:22.054074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:27.835772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:27.835773 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" condition "Ready" to 2026-03-31 20:32:27.835756699 +0000 UTC m=+436.062594660 I0331 20:32:27.835797 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" condition "Issuing" to 2026-03-31 20:32:27.83579364 +0000 UTC m=+436.062631571 I0331 20:32:27.849340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:27.849397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:27.849411 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" condition "Issuing" to 2026-03-31 20:32:27.849406106 +0000 UTC m=+436.076244047 I0331 20:32:28.290585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:28.292517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wh4g4-jnw4q" condition "Approved" to 2026-03-31 20:32:28.292505046 +0000 UTC m=+436.519342987 I0331 20:32:28.310963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wh4g4-jnw4q" condition "Ready" to 2026-03-31 20:32:28.310949508 +0000 UTC m=+436.537787459 I0331 20:32:28.338642 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:28.33863166 +0000 UTC m=+436.565469601 I0331 20:32:28.353113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:28.353397 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:28.353389343 +0000 UTC m=+436.580227284 I0331 20:32:28.371395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:28.372854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wh4g4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:55.294778 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-31 20:32:55.294763322 +0000 UTC m=+463.521601263 I0331 20:32:55.294842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:55.294930 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-31 20:32:55.294916406 +0000 UTC m=+463.521754347 I0331 20:32:55.310450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:55.310536 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-31 20:32:55.31052844 +0000 UTC m=+463.537366401 I0331 20:32:55.397549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:55.426944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-46sfj" condition "Approved" to 2026-03-31 20:32:55.426928616 +0000 UTC m=+463.653766547 I0331 20:32:55.453112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-46sfj" condition "Ready" to 2026-03-31 20:32:55.453095393 +0000 UTC m=+463.679933364 I0331 20:32:55.483846 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:55.483835069 +0000 UTC m=+463.710673010 I0331 20:32:55.511161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:55.511445 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:55.51143799 +0000 UTC m=+463.738275931 I0331 20:32:55.533052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:36:14.546621 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:36:14.546712 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-31 20:36:14.546700046 +0000 UTC m=+662.773538017 I0331 20:36:14.547558 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-31 20:36:14.547543826 +0000 UTC m=+662.774381797 I0331 20:36:14.561922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:36:14.561990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:36:14.562006 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-31 20:36:14.56200024 +0000 UTC m=+662.788838161 I0331 20:36:14.849840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:36:14.857505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xdbm8" condition "Approved" to 2026-03-31 20:36:14.857490337 +0000 UTC m=+663.084328288 I0331 20:36:14.875920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xdbm8" condition "Ready" to 2026-03-31 20:36:14.875907297 +0000 UTC m=+663.102745258 I0331 20:36:14.906536 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:36:14.906524786 +0000 UTC m=+663.133362727 I0331 20:36:14.932849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:36:14.933231 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:36:14.933222721 +0000 UTC m=+663.160060682 I0331 20:36:14.959138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:38:44.870087 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-31 20:38:44.870066488 +0000 UTC m=+813.096904859 I0331 20:38:44.870135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:38:44.870338 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-31 20:38:44.870324784 +0000 UTC m=+813.097162755 I0331 20:38:44.892800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:38:44.892867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:38:44.892930 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-31 20:38:44.892923674 +0000 UTC m=+813.119761605 I0331 20:38:45.128142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-drpjn" condition "Approved" to 2026-03-31 20:38:45.128131556 +0000 UTC m=+813.354969487 I0331 20:38:45.149230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-drpjn" condition "Ready" to 2026-03-31 20:38:45.14921897 +0000 UTC m=+813.376056911 I0331 20:38:45.181163 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:38:45.181150993 +0000 UTC m=+813.407988934 I0331 20:38:45.203827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:38:45.204303 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:38:45.204294966 +0000 UTC m=+813.431132907 I0331 20:38:45.231896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:51.503543 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-31 20:39:51.503486415 +0000 UTC m=+879.730324376 I0331 20:39:51.504023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:39:51.504081 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-31 20:39:51.504074239 +0000 UTC m=+879.730912200 I0331 20:39:51.527493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:51.527615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:39:51.527642 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-31 20:39:51.527634853 +0000 UTC m=+879.754472804 I0331 20:39:51.744974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:51.761073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-whxn8" condition "Approved" to 2026-03-31 20:39:51.761056002 +0000 UTC m=+879.987893973 I0331 20:39:51.782033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-whxn8" condition "Ready" to 2026-03-31 20:39:51.782017682 +0000 UTC m=+880.008855643 I0331 20:39:51.813290 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:39:51.813275721 +0000 UTC m=+880.040113662 I0331 20:39:51.834415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:51.834888 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:39:51.834879946 +0000 UTC m=+880.061717897 I0331 20:39:51.842097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:51.864965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:43:01.438088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:43:01.438194 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-31 20:43:01.438183428 +0000 UTC m=+1069.665021399 I0331 20:43:01.438083 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-31 20:43:01.438020175 +0000 UTC m=+1069.664858146 I0331 20:43:01.458659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:43:01.458774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:43:01.458800 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-31 20:43:01.458791692 +0000 UTC m=+1069.685629663 I0331 20:43:01.564831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:43:01.571970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w2xbz" condition "Approved" to 2026-03-31 20:43:01.571954188 +0000 UTC m=+1069.798792129 I0331 20:43:01.587661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w2xbz" condition "Ready" to 2026-03-31 20:43:01.587650793 +0000 UTC m=+1069.814488724 I0331 20:43:01.615783 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:43:01.615766016 +0000 UTC m=+1069.842603957 I0331 20:43:01.639844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:43:01.640448 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:43:01.640438026 +0000 UTC m=+1069.867275997 I0331 20:43:01.660490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"