I0308 02:04:10.449665 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0308 02:04:10.449906 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0308 02:04:10.450114 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0308 02:04:10.455096 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0308 02:04:10.455667 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0308 02:04:10.455831 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0308 02:04:10.455843 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0308 02:04:10.458431 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0308 02:04:10.475822 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0308 02:04:10.476069 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0308 02:04:10.480010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0308 02:04:10.486005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0308 02:04:10.490396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0308 02:04:10.493555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0308 02:04:10.495701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0308 02:04:10.497791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0308 02:04:10.499708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0308 02:04:10.502353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0308 02:04:10.507524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0308 02:04:10.510517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0308 02:04:10.513007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0308 02:04:10.515506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0308 02:04:10.518073 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0308 02:04:10.518166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0308 02:04:10.520508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0308 02:04:10.522175 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0308 02:04:10.522213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0308 02:04:10.524112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0308 02:04:10.529297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0308 02:04:10.535343 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0308 02:04:10.535399 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0308 02:04:10.535420 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0308 02:04:10.539156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0308 02:04:10.539590 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.540825 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.541192 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.541574 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.562141 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.573288 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.574769 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.592106 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.614583 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:10.639179 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0308 02:04:19.514972 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-08 02:04:19.514951604 +0000 UTC m=+9.101241216 I0308 02:04:20.252665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:04:20.252757 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-08 02:04:20.252744256 +0000 UTC m=+9.839033908 I0308 02:04:20.252767 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-08 02:04:20.252746976 +0000 UTC m=+9.839036668 E0308 02:04:20.271871 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0308 02:04:20.271943 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-08 02:04:20.271935218 +0000 UTC m=+9.858224840 E0308 02:04:20.271968 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0308 02:04:20.276323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:04:20.276399 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-08 02:04:20.276390666 +0000 UTC m=+9.862680318 E0308 02:04:20.282394 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0308 02:04:20.282494 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0308 02:04:20.282533 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0308 02:04:20.282584 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0308 02:04:20.289855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:04:20.290048 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-08 02:04:20.290005826 +0000 UTC m=+9.876295468 I0308 02:04:20.292026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k48js" condition "Approved" to 2026-03-08 02:04:20.29201257 +0000 UTC m=+9.878302212 I0308 02:04:20.301510 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-08 02:04:20.301502859 +0000 UTC m=+9.887792481 I0308 02:04:20.306831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k48js" condition "Ready" to 2026-03-08 02:04:20.306819986 +0000 UTC m=+9.893109598 I0308 02:04:20.311636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:04:20.329326 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:04:20.32928171 +0000 UTC m=+9.915571352 I0308 02:04:20.344694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:04:20.388142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:04:25.283256 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:04:25.283235325 +0000 UTC m=+14.869524927 I0308 02:04:45.697759 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-08 02:04:45.697746998 +0000 UTC m=+35.284036610 I0308 02:04:45.698240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:04:45.698266 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-08 02:04:45.69826382 +0000 UTC m=+35.284553432 I0308 02:04:45.727548 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-08 02:04:45.727530583 +0000 UTC m=+35.313820195 I0308 02:04:45.742907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:04:45.743008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:04:45.743046 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-08 02:04:45.743039129 +0000 UTC m=+35.329328751 I0308 02:04:45.878497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7llm6" condition "Approved" to 2026-03-08 02:04:45.878465534 +0000 UTC m=+35.464755186 I0308 02:04:45.918697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7llm6" condition "Ready" to 2026-03-08 02:04:45.918677726 +0000 UTC m=+35.504967378 I0308 02:04:45.953728 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:04:45.953704235 +0000 UTC m=+35.539993917 I0308 02:04:45.974668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:04:45.975091 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:04:45.975082251 +0000 UTC m=+35.561371873 I0308 02:04:45.991567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:04:45.999087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:06:36.203649 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-08 02:06:36.20359728 +0000 UTC m=+145.789886922 I0308 02:06:36.203787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:06:36.203852 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-08 02:06:36.203836165 +0000 UTC m=+145.790125817 E0308 02:06:36.226244 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0308 02:06:36.226307 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-08 02:06:36.22630115 +0000 UTC m=+145.812590772 I0308 02:06:36.226354 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0308 02:06:36.229280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:06:36.229402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:06:36.229437 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-08 02:06:36.229427794 +0000 UTC m=+145.815717446 E0308 02:06:36.236829 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0308 02:06:36.237105 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0308 02:06:36.237200 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0308 02:06:36.237291 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0308 02:06:36.238787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:06:36.238813 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-08 02:06:36.238804847 +0000 UTC m=+145.825094469 I0308 02:06:36.239117 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-08 02:06:36.239102125 +0000 UTC m=+145.825391777 I0308 02:06:36.261200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:06:36.261307 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-08 02:06:36.261295652 +0000 UTC m=+145.847585284 I0308 02:06:36.664323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:06:36.695118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tklp9" condition "Approved" to 2026-03-08 02:06:36.695101033 +0000 UTC m=+146.281390705 I0308 02:06:36.708781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:06:36.715042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2mltk" condition "Approved" to 2026-03-08 02:06:36.715025677 +0000 UTC m=+146.301315329 I0308 02:06:36.722449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tklp9" condition "Ready" to 2026-03-08 02:06:36.722434774 +0000 UTC m=+146.308724396 I0308 02:06:36.740742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2mltk" condition "Ready" to 2026-03-08 02:06:36.740724769 +0000 UTC m=+146.327014391 I0308 02:06:36.771726 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:06:36.771713667 +0000 UTC m=+146.358003319 I0308 02:06:36.791277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:06:41.238246 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:06:41.238230985 +0000 UTC m=+150.824520627 I0308 02:06:41.257640 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-tklp9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:06:41.257619266 +0000 UTC m=+150.843908908 I0308 02:06:41.290146 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:06:41.29011851 +0000 UTC m=+150.876408162 I0308 02:06:41.311658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:06:41.366111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:09:17.753311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:09:17.753372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Issuing" to 2026-03-08 02:09:17.753340397 +0000 UTC m=+307.339630019 I0308 02:09:17.753490 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Ready" to 2026-03-08 02:09:17.753482761 +0000 UTC m=+307.339772393 I0308 02:09:17.772504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:09:17.772638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:09:17.772679 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Issuing" to 2026-03-08 02:09:17.772669275 +0000 UTC m=+307.358958927 I0308 02:09:18.011926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:09:18.019427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-227.nip.io-tls-2v5ls" condition "Approved" to 2026-03-08 02:09:18.019415664 +0000 UTC m=+307.605705276 I0308 02:09:18.036153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-227.nip.io-tls-2v5ls" condition "Ready" to 2026-03-08 02:09:18.036139851 +0000 UTC m=+307.622429473 I0308 02:09:18.063038 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:09:18.063023666 +0000 UTC m=+307.649313288 I0308 02:09:18.093389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:09:18.142473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:10:28.216055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:10:28.216130 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-08 02:10:28.216092446 +0000 UTC m=+377.802382098 I0308 02:10:28.216491 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-08 02:10:28.216464334 +0000 UTC m=+377.802753956 E0308 02:10:28.232194 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0308 02:10:28.232240 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-08 02:10:28.232230132 +0000 UTC m=+377.818519744 E0308 02:10:28.232292 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0308 02:10:28.235260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:10:28.235364 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-08 02:10:28.235355085 +0000 UTC m=+377.821644697 E0308 02:10:28.243568 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0308 02:10:28.243674 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0308 02:10:28.243707 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0308 02:10:28.243754 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0308 02:10:28.253632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:10:28.273383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ffgws" condition "Approved" to 2026-03-08 02:10:28.273360329 +0000 UTC m=+377.859649951 I0308 02:10:28.287235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ffgws" condition "Ready" to 2026-03-08 02:10:28.287213682 +0000 UTC m=+377.873503334 I0308 02:10:28.308603 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:10:28.308583951 +0000 UTC m=+377.894873563 I0308 02:10:28.329092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:10:28.329419 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:10:28.329407245 +0000 UTC m=+377.915696867 I0308 02:10:28.343670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:10:28.348950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:10:28.349256 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:10:28.349245447 +0000 UTC m=+377.935535059 I0308 02:10:28.350866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:10:33.244780 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:10:33.244759019 +0000 UTC m=+382.831048661 I0308 02:11:13.835908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:11:13.835955 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-08 02:11:13.835947685 +0000 UTC m=+423.422237297 I0308 02:11:13.837133 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-08 02:11:13.837128242 +0000 UTC m=+423.423417854 I0308 02:11:13.837606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:11:13.837623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-08 02:11:13.837620434 +0000 UTC m=+423.423910046 I0308 02:11:13.837891 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-08 02:11:13.83788721 +0000 UTC m=+423.424176822 I0308 02:11:13.837251 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-08 02:11:13.837187814 +0000 UTC m=+423.423477426 I0308 02:11:13.837142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:11:13.845916 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-08 02:11:13.845900626 +0000 UTC m=+423.432190408 I0308 02:11:13.880847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:13.880951 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-08 02:11:13.88094063 +0000 UTC m=+423.467230252 I0308 02:11:13.899197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:13.899280 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-08 02:11:13.899273086 +0000 UTC m=+423.485562708 I0308 02:11:13.900494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:13.900555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:11:13.900578 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-08 02:11:13.900574077 +0000 UTC m=+423.486863689 I0308 02:11:14.024528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:14.061496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rfj9s" condition "Approved" to 2026-03-08 02:11:14.061483824 +0000 UTC m=+423.647773436 I0308 02:11:14.079863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rfj9s" condition "Ready" to 2026-03-08 02:11:14.079848231 +0000 UTC m=+423.666137873 I0308 02:11:14.109337 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:11:14.109323595 +0000 UTC m=+423.695613247 I0308 02:11:14.134173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:14.154171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:14.185753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8wgvk" condition "Approved" to 2026-03-08 02:11:14.18573133 +0000 UTC m=+423.772020952 I0308 02:11:14.201467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:14.211352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8wgvk" condition "Ready" to 2026-03-08 02:11:14.211338466 +0000 UTC m=+423.797628078 I0308 02:11:14.349605 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:11:14.349590167 +0000 UTC m=+423.935879779 E0308 02:11:14.379458 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-njhx2\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0308 02:11:14.530930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:14.531351 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:11:14.531343249 +0000 UTC m=+424.117632881 I0308 02:11:14.936100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-n4xq8" condition "Approved" to 2026-03-08 02:11:14.936084531 +0000 UTC m=+424.522374153 I0308 02:11:14.983676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:15.035352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:15.152365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-n4xq8" condition "Ready" to 2026-03-08 02:11:15.152344876 +0000 UTC m=+424.738634538 I0308 02:11:15.679385 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-n4xq8" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-584mz" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0308 02:11:15.836546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4xn5p" condition "Approved" to 2026-03-08 02:11:15.836518349 +0000 UTC m=+425.422807961 I0308 02:11:16.141386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4xn5p" condition "Ready" to 2026-03-08 02:11:16.141373031 +0000 UTC m=+425.727662653 I0308 02:11:16.388162 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:11:16.388139163 +0000 UTC m=+425.974428785 I0308 02:11:16.485673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:16.781625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:21.619590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:11:21.619634 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" condition "Issuing" to 2026-03-08 02:11:21.619623441 +0000 UTC m=+431.205913083 I0308 02:11:21.620168 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" condition "Ready" to 2026-03-08 02:11:21.620157573 +0000 UTC m=+431.206447215 I0308 02:11:21.634984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:21.637810 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" condition "Ready" to 2026-03-08 02:11:21.637796203 +0000 UTC m=+431.224085825 I0308 02:11:21.977598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:22.019788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qb7gk-pmmmg" condition "Approved" to 2026-03-08 02:11:22.019775996 +0000 UTC m=+431.606065608 I0308 02:11:22.041373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qb7gk-pmmmg" condition "Ready" to 2026-03-08 02:11:22.041360478 +0000 UTC m=+431.627650100 I0308 02:11:22.073623 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:11:22.073611077 +0000 UTC m=+431.659900689 I0308 02:11:22.095026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:22.095437 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:11:22.095429184 +0000 UTC m=+431.681718796 I0308 02:11:22.101503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:22.113579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qb7gk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:43.826993 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-08 02:11:43.82697376 +0000 UTC m=+453.413263412 I0308 02:11:43.827063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:11:43.827106 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-08 02:11:43.827095193 +0000 UTC m=+453.413384845 I0308 02:11:43.845717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:43.845860 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-08 02:11:43.845847089 +0000 UTC m=+453.432136741 I0308 02:11:43.946464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:43.974379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j8tfx" condition "Approved" to 2026-03-08 02:11:43.974368515 +0000 UTC m=+453.560658127 I0308 02:11:43.994117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j8tfx" condition "Ready" to 2026-03-08 02:11:43.994106883 +0000 UTC m=+453.580396505 I0308 02:11:44.019231 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:11:44.019221567 +0000 UTC m=+453.605511179 I0308 02:11:44.042006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:44.042755 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:11:44.042745213 +0000 UTC m=+453.629034845 I0308 02:11:44.072422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:11:44.075479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:15:07.123677 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-08 02:15:07.123620812 +0000 UTC m=+656.709910464 I0308 02:15:07.123896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:15:07.124013 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-08 02:15:07.123999501 +0000 UTC m=+656.710289153 I0308 02:15:07.142930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:15:07.143020 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-08 02:15:07.14300943 +0000 UTC m=+656.729299082 I0308 02:15:07.648406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:15:07.682884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r5fzd" condition "Approved" to 2026-03-08 02:15:07.682870574 +0000 UTC m=+657.269160196 I0308 02:15:07.702715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r5fzd" condition "Ready" to 2026-03-08 02:15:07.702696452 +0000 UTC m=+657.288986104 I0308 02:15:07.728509 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:15:07.728494662 +0000 UTC m=+657.314784284 I0308 02:15:07.749003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:17:33.573795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:17:33.573900 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-08 02:17:33.573860431 +0000 UTC m=+803.160150063 I0308 02:17:33.574066 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-08 02:17:33.574054635 +0000 UTC m=+803.160344257 I0308 02:17:33.594836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:17:33.594959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:17:33.594987 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-08 02:17:33.594977909 +0000 UTC m=+803.181267551 I0308 02:17:34.007482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-hs5n9" condition "Approved" to 2026-03-08 02:17:34.007465918 +0000 UTC m=+803.593755570 I0308 02:17:34.037561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-hs5n9" condition "Ready" to 2026-03-08 02:17:34.037548448 +0000 UTC m=+803.623838060 I0308 02:17:34.067089 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:17:34.067076396 +0000 UTC m=+803.653366008 I0308 02:17:34.091018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:17:34.091543 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:17:34.091537605 +0000 UTC m=+803.677827217 I0308 02:17:34.113636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:18:40.412180 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-08 02:18:40.412162749 +0000 UTC m=+869.998452371 I0308 02:18:40.412233 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:18:40.412352 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-08 02:18:40.412338793 +0000 UTC m=+869.998628435 I0308 02:18:40.431128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:18:40.431212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:18:40.431244 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-08 02:18:40.431229398 +0000 UTC m=+870.017519050 I0308 02:18:40.659443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8b9fj" condition "Approved" to 2026-03-08 02:18:40.659423505 +0000 UTC m=+870.245713137 I0308 02:18:40.677402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8b9fj" condition "Ready" to 2026-03-08 02:18:40.677387118 +0000 UTC m=+870.263676730 I0308 02:18:40.738809 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:18:40.738792442 +0000 UTC m=+870.325082064 I0308 02:18:40.766382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:18:40.766736 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:18:40.766726149 +0000 UTC m=+870.353015771 I0308 02:18:40.770032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:18:40.785020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:18:40.785361 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:18:40.785354038 +0000 UTC m=+870.371643680 I0308 02:21:49.105895 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-08 02:21:49.105863799 +0000 UTC m=+1058.692153421 I0308 02:21:49.106049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:21:49.106130 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-08 02:21:49.106122245 +0000 UTC m=+1058.692411867 I0308 02:21:49.125824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:21:49.126059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0308 02:21:49.126172 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-08 02:21:49.126164508 +0000 UTC m=+1058.712454130 I0308 02:21:49.396348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0308 02:21:49.406836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kgm5l" condition "Approved" to 2026-03-08 02:21:49.406822414 +0000 UTC m=+1058.993112036 I0308 02:21:49.429211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kgm5l" condition "Ready" to 2026-03-08 02:21:49.429186122 +0000 UTC m=+1059.015475834 I0308 02:21:49.458292 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-08 02:21:49.458279837 +0000 UTC m=+1059.044569439 I0308 02:21:49.478966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"