I0504 01:41:03.906794 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0504 01:41:03.906982 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0504 01:41:03.907093 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0504 01:41:03.912714 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0504 01:41:03.913277 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0504 01:41:03.913388 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0504 01:41:03.913531 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0504 01:41:03.916074 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0504 01:41:03.934165 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0504 01:41:03.938684 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0504 01:41:03.938712 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0504 01:41:03.938807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0504 01:41:03.944401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0504 01:41:03.949205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0504 01:41:03.953472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0504 01:41:03.955322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0504 01:41:03.957079 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0504 01:41:03.957101 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0504 01:41:03.957110 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0504 01:41:03.957235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0504 01:41:03.959122 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0504 01:41:03.962248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0504 01:41:03.968510 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0504 01:41:03.972605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0504 01:41:03.975069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0504 01:41:03.976994 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0504 01:41:03.977190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0504 01:41:03.979280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0504 01:41:03.981230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0504 01:41:03.983271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0504 01:41:03.985526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0504 01:41:03.988424 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0504 01:41:03.995358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0504 01:41:03.997822 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:03.998247 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:03.999151 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:03.999604 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:04.053990 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:04.070827 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:04.092707 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:04.095109 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:04.112900 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:04.152849 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:41:16.198711 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-04 01:41:16.198697776 +0000 UTC m=+12.333529599 I0504 01:41:16.936480 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-04 01:41:16.936458786 +0000 UTC m=+13.071290649 I0504 01:41:16.936816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:16.936905 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-04 01:41:16.936887969 +0000 UTC m=+13.071719842 I0504 01:41:16.953441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:16.953531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:16.953583 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-04 01:41:16.953573822 +0000 UTC m=+13.088405655 E0504 01:41:16.953725 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:41:16.953825 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-04 01:41:16.95381483 +0000 UTC m=+13.088646663 E0504 01:41:16.953887 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:41:16.968745 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0504 01:41:16.968903 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:41:16.968949 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:41:16.969003 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0504 01:41:16.996594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-62b99" condition "Approved" to 2026-05-04 01:41:16.996574797 +0000 UTC m=+13.131406650 I0504 01:41:17.010334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-62b99" condition "Ready" to 2026-05-04 01:41:17.010318386 +0000 UTC m=+13.145150219 I0504 01:41:17.031913 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:17.031895875 +0000 UTC m=+13.166727718 I0504 01:41:17.053414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:17.108910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:21.969571 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:21.969551556 +0000 UTC m=+18.104383419 I0504 01:41:45.927805 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-04 01:41:45.92778713 +0000 UTC m=+42.062618963 I0504 01:41:45.928098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:45.928145 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-04 01:41:45.928138372 +0000 UTC m=+42.062970205 I0504 01:41:45.939316 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-04 01:41:45.93929799 +0000 UTC m=+42.074129823 I0504 01:41:45.950625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:45.950782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:41:45.950828 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-04 01:41:45.950814949 +0000 UTC m=+42.085646812 I0504 01:41:46.215722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:41:46.226092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fxz86" condition "Approved" to 2026-05-04 01:41:46.226075274 +0000 UTC m=+42.360907137 I0504 01:41:46.261080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fxz86" condition "Ready" to 2026-05-04 01:41:46.261062376 +0000 UTC m=+42.395894229 I0504 01:41:46.299571 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:41:46.29954993 +0000 UTC m=+42.434381763 I0504 01:41:46.322711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:09.340264 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-04 01:44:09.340241462 +0000 UTC m=+185.475073285 I0504 01:44:09.340293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:44:09.340347 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-04 01:44:09.340341125 +0000 UTC m=+185.475172968 E0504 01:44:09.358154 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0504 01:44:09.358228 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-04 01:44:09.358220586 +0000 UTC m=+185.493052409 I0504 01:44:09.358269 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0504 01:44:09.362412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:09.362508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:44:09.362536 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-04 01:44:09.362530096 +0000 UTC m=+185.497361929 E0504 01:44:09.369074 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0504 01:44:09.369808 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0504 01:44:09.369893 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0504 01:44:09.369984 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0504 01:44:09.393455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:44:09.393464 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-04 01:44:09.393448071 +0000 UTC m=+185.528279904 I0504 01:44:09.393486 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-04 01:44:09.393477702 +0000 UTC m=+185.528309535 I0504 01:44:09.419335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:09.419578 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-04 01:44:09.419566149 +0000 UTC m=+185.554397982 I0504 01:44:09.627011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:09.668550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-kkk7t" condition "Approved" to 2026-05-04 01:44:09.668535668 +0000 UTC m=+185.803367511 I0504 01:44:09.693463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-kkk7t" condition "Ready" to 2026-05-04 01:44:09.693451437 +0000 UTC m=+185.828283260 I0504 01:44:09.727394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:09.734028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r72g6" condition "Approved" to 2026-05-04 01:44:09.734013285 +0000 UTC m=+185.868845148 I0504 01:44:09.773049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r72g6" condition "Ready" to 2026-05-04 01:44:09.773012512 +0000 UTC m=+185.907844375 I0504 01:44:09.821242 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:44:09.821224469 +0000 UTC m=+185.956056332 I0504 01:44:09.854239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:09.929856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:14.370366 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:44:14.370351456 +0000 UTC m=+190.505183319 I0504 01:44:14.389438 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-kkk7t" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:44:14.389415225 +0000 UTC m=+190.524247088 I0504 01:44:14.420008 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:44:14.419988389 +0000 UTC m=+190.554820252 I0504 01:44:14.442091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:14.495551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:57.495537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:46:57.495697 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-05-04 01:46:57.495638759 +0000 UTC m=+353.630470622 I0504 01:46:57.496094 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-05-04 01:46:57.496069302 +0000 UTC m=+353.630901135 I0504 01:46:57.520160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:57.520304 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-05-04 01:46:57.520290949 +0000 UTC m=+353.655122812 I0504 01:46:57.628186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:57.673597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-lmf82" condition "Approved" to 2026-05-04 01:46:57.673572033 +0000 UTC m=+353.808403926 I0504 01:46:57.701606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-lmf82" condition "Ready" to 2026-05-04 01:46:57.701573731 +0000 UTC m=+353.836405594 I0504 01:46:57.745373 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:46:57.745352345 +0000 UTC m=+353.880184198 I0504 01:46:57.769504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:57.842222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:12.547022 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-04 01:48:12.546847052 +0000 UTC m=+428.681678915 I0504 01:48:12.547069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:48:12.547338 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 01:48:12.547326517 +0000 UTC m=+428.682158380 E0504 01:48:12.560409 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:48:12.560451 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-04 01:48:12.560444068 +0000 UTC m=+428.695275901 E0504 01:48:12.560530 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:48:12.563992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:12.564104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:48:12.564129 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 01:48:12.564120246 +0000 UTC m=+428.698952079 E0504 01:48:12.573395 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0504 01:48:12.574693 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:48:12.574951 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:48:12.575197 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0504 01:48:12.602021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:12.604937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pjjzw" condition "Approved" to 2026-05-04 01:48:12.604887163 +0000 UTC m=+428.739719026 I0504 01:48:12.619704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pjjzw" condition "Ready" to 2026-05-04 01:48:12.619685557 +0000 UTC m=+428.754517420 I0504 01:48:12.645503 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:48:12.645476394 +0000 UTC m=+428.780308227 I0504 01:48:12.666351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:12.666711 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:48:12.666699844 +0000 UTC m=+428.801531677 I0504 01:48:12.686297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:12.686671 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:48:12.686658294 +0000 UTC m=+428.821490147 I0504 01:48:12.689146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:17.574304 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:48:17.574288763 +0000 UTC m=+433.709120576 I0504 01:48:58.175331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:48:58.175377 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-04 01:48:58.175366214 +0000 UTC m=+474.310198047 I0504 01:48:58.175842 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-04 01:48:58.175834739 +0000 UTC m=+474.310666572 I0504 01:48:58.176160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:48:58.176219 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-04 01:48:58.176210171 +0000 UTC m=+474.311042004 I0504 01:48:58.176207 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-04 01:48:58.17618565 +0000 UTC m=+474.311017473 I0504 01:48:58.179639 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-04 01:48:58.17962436 +0000 UTC m=+474.314456183 I0504 01:48:58.183325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:48:58.183411 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-04 01:48:58.183396901 +0000 UTC m=+474.318228744 I0504 01:48:58.247684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:58.247777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:48:58.247818 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-04 01:48:58.247809497 +0000 UTC m=+474.382641330 I0504 01:48:58.247983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:58.248720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:58.248786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:48:58.248816 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-04 01:48:58.248811839 +0000 UTC m=+474.383643672 I0504 01:48:58.248035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:48:58.251036 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-04 01:48:58.249821162 +0000 UTC m=+474.384653025 I0504 01:48:58.443027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:58.443554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jbrkl" condition "Approved" to 2026-05-04 01:48:58.443540087 +0000 UTC m=+474.578371920 I0504 01:48:58.468637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:58.474226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jbrkl" condition "Ready" to 2026-05-04 01:48:58.474210351 +0000 UTC m=+474.609042184 I0504 01:48:58.483580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w7fm8" condition "Approved" to 2026-05-04 01:48:58.483562641 +0000 UTC m=+474.618394474 I0504 01:48:58.515578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w7fm8" condition "Ready" to 2026-05-04 01:48:58.515564958 +0000 UTC m=+474.650396781 I0504 01:48:58.536834 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:48:58.53681932 +0000 UTC m=+474.671651153 I0504 01:48:58.550531 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:48:58.55051307 +0000 UTC m=+474.685344903 I0504 01:48:58.554844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:58.555715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:58.569765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jrtrt" condition "Approved" to 2026-05-04 01:48:58.569754857 +0000 UTC m=+474.704586680 I0504 01:48:58.595642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:58.806236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jrtrt" condition "Ready" to 2026-05-04 01:48:58.806221554 +0000 UTC m=+474.941053387 I0504 01:48:59.449519 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:48:59.449499334 +0000 UTC m=+475.584331167 I0504 01:48:59.699218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:48:59.699805 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:48:59.699790945 +0000 UTC m=+475.834622798 I0504 01:48:59.797553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:00.045418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:00.095132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:06.643388 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:49:06.643382 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls" condition "Ready" to 2026-05-04 01:49:06.643358302 +0000 UTC m=+482.778190135 I0504 01:49:06.643435 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls" condition "Issuing" to 2026-05-04 01:49:06.643428764 +0000 UTC m=+482.778260597 I0504 01:49:06.660804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:06.660904 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls" condition "Ready" to 2026-05-04 01:49:06.660891854 +0000 UTC m=+482.795723677 I0504 01:49:06.887280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:07.061388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fhq6k-qnxjp" condition "Approved" to 2026-05-04 01:49:07.061365854 +0000 UTC m=+483.196197687 I0504 01:49:07.081335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fhq6k-qnxjp" condition "Ready" to 2026-05-04 01:49:07.081311594 +0000 UTC m=+483.216143447 I0504 01:49:07.115147 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:49:07.115128029 +0000 UTC m=+483.249959872 I0504 01:49:07.137506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fhq6k-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:29.820941 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-04 01:49:29.820918555 +0000 UTC m=+505.955750408 I0504 01:49:29.821502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:49:29.821575 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-04 01:49:29.821559616 +0000 UTC m=+505.956391469 I0504 01:49:29.837041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:29.837148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:49:29.837190 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-04 01:49:29.837180496 +0000 UTC m=+505.972012339 I0504 01:49:30.244315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:30.261060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9rljm" condition "Approved" to 2026-05-04 01:49:30.261044338 +0000 UTC m=+506.395876171 I0504 01:49:30.286153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9rljm" condition "Ready" to 2026-05-04 01:49:30.286130141 +0000 UTC m=+506.420962004 I0504 01:49:30.358337 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:49:30.358320101 +0000 UTC m=+506.493151924 I0504 01:49:30.378353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:30.379874 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:49:30.37986407 +0000 UTC m=+506.514695903 I0504 01:49:30.387857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:49:30.404893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:56.150491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:52:56.150555 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-04 01:52:56.150526789 +0000 UTC m=+712.285358642 I0504 01:52:56.150918 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 01:52:56.150899741 +0000 UTC m=+712.285731574 I0504 01:52:56.169197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:56.169309 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 01:52:56.169299888 +0000 UTC m=+712.304131721 I0504 01:52:56.302722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:56.336738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cvpq5" condition "Approved" to 2026-05-04 01:52:56.336722893 +0000 UTC m=+712.471554726 I0504 01:52:56.360588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cvpq5" condition "Ready" to 2026-05-04 01:52:56.360573425 +0000 UTC m=+712.495405278 I0504 01:52:56.393224 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:52:56.393210957 +0000 UTC m=+712.528042820 I0504 01:52:56.416747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:56.417234 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:52:56.417223624 +0000 UTC m=+712.552055457 I0504 01:52:56.440855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:56.444504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:56.444975 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:52:56.444964539 +0000 UTC m=+712.579796372 I0504 01:55:30.674501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:55:30.674539 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-04 01:55:30.674513561 +0000 UTC m=+866.809345424 I0504 01:55:30.674602 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-04 01:55:30.674589683 +0000 UTC m=+866.809421536 I0504 01:55:30.709375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:55:30.709658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:55:30.709720 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-04 01:55:30.709706902 +0000 UTC m=+866.844538765 I0504 01:55:31.313157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:55:31.372023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-l7v4k" condition "Approved" to 2026-05-04 01:55:31.371999018 +0000 UTC m=+867.506830881 I0504 01:55:31.416739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-l7v4k" condition "Ready" to 2026-05-04 01:55:31.416721113 +0000 UTC m=+867.551552966 I0504 01:55:31.634295 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:55:31.634277486 +0000 UTC m=+867.769109349 I0504 01:55:31.670762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:55:31.671259 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:55:31.671222523 +0000 UTC m=+867.806054386 I0504 01:55:31.678616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:55:31.718128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:40.556327 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-04 01:56:40.556303748 +0000 UTC m=+936.691135611 I0504 01:56:40.556989 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:56:40.557063 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-04 01:56:40.557055782 +0000 UTC m=+936.691887635 I0504 01:56:40.576356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:40.576448 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-04 01:56:40.57644242 +0000 UTC m=+936.711274253 I0504 01:56:40.735671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:40.783400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-swl82" condition "Approved" to 2026-05-04 01:56:40.783385811 +0000 UTC m=+936.918217664 I0504 01:56:40.799877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-swl82" condition "Ready" to 2026-05-04 01:56:40.799867366 +0000 UTC m=+936.934699199 I0504 01:56:40.827391 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:56:40.827380233 +0000 UTC m=+936.962212066 I0504 01:56:40.849843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:40.850079 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:56:40.850071816 +0000 UTC m=+936.984903649 I0504 01:56:40.853310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:40.872888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:40.873166 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:56:40.873157611 +0000 UTC m=+937.007989434 I0504 01:56:40.874533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:59:42.979152 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-04 01:59:42.979114638 +0000 UTC m=+1119.113946471 I0504 01:59:42.979324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:59:42.979740 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-04 01:59:42.979708697 +0000 UTC m=+1119.114540550 I0504 01:59:42.997140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:59:42.997237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:59:42.997261 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-04 01:59:42.997254247 +0000 UTC m=+1119.132086100 I0504 01:59:43.239889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mb8sz" condition "Approved" to 2026-05-04 01:59:43.239874226 +0000 UTC m=+1119.374706079 I0504 01:59:43.256970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mb8sz" condition "Ready" to 2026-05-04 01:59:43.25695482 +0000 UTC m=+1119.391786663 I0504 01:59:43.283585 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:59:43.283569318 +0000 UTC m=+1119.418401151 I0504 01:59:43.306594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:59:43.355549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:05:57.361484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 02:05:57.361554 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-04 02:05:57.361519671 +0000 UTC m=+1493.496351494 I0504 02:05:57.361977 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-04 02:05:57.361972436 +0000 UTC m=+1493.496804259 I0504 02:05:57.388197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:05:57.388290 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-04 02:05:57.388281684 +0000 UTC m=+1493.523113517 I0504 02:05:57.518564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:05:57.548259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rd9kz" condition "Approved" to 2026-05-04 02:05:57.548244794 +0000 UTC m=+1493.683076627 I0504 02:05:57.568543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rd9kz" condition "Ready" to 2026-05-04 02:05:57.568533171 +0000 UTC m=+1493.703365014 I0504 02:05:57.605470 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:05:57.605455718 +0000 UTC m=+1493.740287541 I0504 02:05:57.631056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:05:57.631324 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:05:57.631314972 +0000 UTC m=+1493.766146805 I0504 02:05:57.660225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:07:22.425734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 02:07:22.425752 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-04 02:07:22.425741004 +0000 UTC m=+1578.560572837 I0504 02:07:22.425784 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-04 02:07:22.425764585 +0000 UTC m=+1578.560596418 I0504 02:07:22.440934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:07:22.441070 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-04 02:07:22.441060063 +0000 UTC m=+1578.575891896 I0504 02:07:22.660903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:07:22.692279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nvlxq" condition "Approved" to 2026-05-04 02:07:22.692267121 +0000 UTC m=+1578.827098954 I0504 02:07:22.710461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nvlxq" condition "Ready" to 2026-05-04 02:07:22.710449981 +0000 UTC m=+1578.845281814 I0504 02:07:22.742965 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:07:22.742952857 +0000 UTC m=+1578.877784690 I0504 02:07:22.778938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:07:22.827147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"