I0408 01:22:50.290608 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 01:22:50.290804 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 01:22:50.290997 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 01:22:50.297466 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 01:22:50.298147 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 01:22:50.298227 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 01:22:50.298541 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 01:22:50.302803 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 01:22:50.318456 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 01:22:50.318742 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 01:22:50.324470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 01:22:50.327521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 01:22:50.330819 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 01:22:50.333224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 01:22:50.338611 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 01:22:50.341577 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 01:22:50.341606 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 01:22:50.341669 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 01:22:50.344502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 01:22:50.347140 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 01:22:50.347171 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 01:22:50.347275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 01:22:50.349747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 01:22:50.351623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 01:22:50.353587 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 01:22:50.355432 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 01:22:50.362775 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 01:22:50.362928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 01:22:50.365825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 01:22:50.367646 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 01:22:50.369818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 01:22:50.371576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 01:22:50.374298 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 01:22:50.376814 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.377328 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.378417 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.378897 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.397921 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.417088 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.431652 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.449382 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.463682 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:22:50.478162 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:02.183506 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 01:23:02.183481607 +0000 UTC m=+11.922307305 I0408 01:23:03.063701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:23:03.063756 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 01:23:03.06374532 +0000 UTC m=+12.802571018 I0408 01:23:03.063771 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 01:23:03.063727949 +0000 UTC m=+12.802553667 E0408 01:23:03.167013 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:23:03.167107 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 01:23:03.16709789 +0000 UTC m=+12.905923598 E0408 01:23:03.167144 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:23:03.172295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:03.172425 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 01:23:03.172414051 +0000 UTC m=+12.911239749 E0408 01:23:03.479416 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 01:23:03.480110 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:23:03.480322 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:23:03.480442 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 01:23:03.493498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:03.625777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9h2sz" condition "Approved" to 2026-04-08 01:23:03.625758249 +0000 UTC m=+13.364583947 I0408 01:23:03.651526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9h2sz" condition "Ready" to 2026-04-08 01:23:03.651511087 +0000 UTC m=+13.390336785 I0408 01:23:03.677225 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:03.677206385 +0000 UTC m=+13.416032093 I0408 01:23:03.721378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:03.760608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:08.480541 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:08.480522556 +0000 UTC m=+18.219348264 I0408 01:23:30.701252 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 01:23:30.701239451 +0000 UTC m=+40.440065129 I0408 01:23:30.701407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:23:30.701496 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 01:23:30.701485906 +0000 UTC m=+40.440311594 I0408 01:23:30.712721 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 01:23:30.712711168 +0000 UTC m=+40.451536846 I0408 01:23:30.725819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:30.726155 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 01:23:30.726135202 +0000 UTC m=+40.464960880 I0408 01:23:30.818559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:30.864571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8lh2z" condition "Approved" to 2026-04-08 01:23:30.864556898 +0000 UTC m=+40.603382606 I0408 01:23:30.904132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8lh2z" condition "Ready" to 2026-04-08 01:23:30.904119479 +0000 UTC m=+40.642945167 I0408 01:23:30.948963 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:30.948945729 +0000 UTC m=+40.687771427 I0408 01:23:30.980748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:30.981168 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:30.98116102 +0000 UTC m=+40.719986708 I0408 01:23:31.027581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:31.027716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:25:16.993204 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 01:25:16.99316247 +0000 UTC m=+146.731988138 I0408 01:25:16.993248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:25:16.993266 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 01:25:16.993261922 +0000 UTC m=+146.732087610 E0408 01:25:17.004540 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 01:25:17.006365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:25:17.006529 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 01:25:17.006489917 +0000 UTC m=+146.745315615 I0408 01:25:17.004624 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-08 01:25:17.004613821 +0000 UTC m=+146.743439509 I0408 01:25:17.006736 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 01:25:17.015929 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0408 01:25:17.016028 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 01:25:17.016094 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 01:25:17.016131 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 01:25:17.022194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:25:17.022219 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 01:25:17.022212788 +0000 UTC m=+146.761038456 I0408 01:25:17.022636 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 01:25:17.022626805 +0000 UTC m=+146.761452493 I0408 01:25:17.038980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:25:17.039068 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 01:25:17.039060979 +0000 UTC m=+146.777886657 I0408 01:25:17.207497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:25:17.242719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-92x2m" condition "Approved" to 2026-04-08 01:25:17.242662804 +0000 UTC m=+146.981488532 I0408 01:25:17.273217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-92x2m" condition "Ready" to 2026-04-08 01:25:17.273204999 +0000 UTC m=+147.012030677 I0408 01:25:17.537129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:25:17.566242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-7mb6q" condition "Approved" to 2026-04-08 01:25:17.566230979 +0000 UTC m=+147.305056657 I0408 01:25:17.591500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-7mb6q" condition "Ready" to 2026-04-08 01:25:17.591489576 +0000 UTC m=+147.330315244 I0408 01:25:17.626101 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:25:17.626082046 +0000 UTC m=+147.364907754 I0408 01:25:17.643644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:25:17.644016 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:25:17.644010057 +0000 UTC m=+147.382835735 I0408 01:25:17.664961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:25:22.016823 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:25:22.016807822 +0000 UTC m=+151.755633520 I0408 01:25:22.033973 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-92x2m" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:25:22.033950079 +0000 UTC m=+151.772775737 I0408 01:25:22.066954 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:25:22.066934839 +0000 UTC m=+151.805760527 I0408 01:25:22.093524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:25:22.146402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:27:59.022124 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-209.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:27:59.022210 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Issuing" to 2026-04-08 01:27:59.022176627 +0000 UTC m=+308.761002335 I0408 01:27:59.022656 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Ready" to 2026-04-08 01:27:59.022092025 +0000 UTC m=+308.760917703 I0408 01:27:59.039504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:27:59.039609 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Ready" to 2026-04-08 01:27:59.039597013 +0000 UTC m=+308.778422721 I0408 01:27:59.312596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:27:59.341953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-209.nip.io-tls-d6xwh" condition "Approved" to 2026-04-08 01:27:59.34192952 +0000 UTC m=+309.080755228 I0408 01:27:59.361151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-209.nip.io-tls-d6xwh" condition "Ready" to 2026-04-08 01:27:59.361136888 +0000 UTC m=+309.099962556 I0408 01:27:59.392822 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:27:59.392810782 +0000 UTC m=+309.131636460 I0408 01:27:59.414846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:27:59.415423 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:27:59.415410134 +0000 UTC m=+309.154235842 I0408 01:27:59.435788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:27:59.436009 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:27:59.435999109 +0000 UTC m=+309.174824777 I0408 01:29:21.178571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:29:21.178681 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 01:29:21.178669096 +0000 UTC m=+390.917494794 I0408 01:29:21.179450 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 01:29:21.17944205 +0000 UTC m=+390.918267748 E0408 01:29:21.191816 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:29:21.191910 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 01:29:21.191899696 +0000 UTC m=+390.930725374 E0408 01:29:21.191933 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:29:21.195163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:29:21.195237 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 01:29:21.19523015 +0000 UTC m=+390.934055848 E0408 01:29:21.202433 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 01:29:21.202763 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:29:21.202813 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:29:21.202884 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 01:29:21.210882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:29:21.232352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bj8fj" condition "Approved" to 2026-04-08 01:29:21.232310803 +0000 UTC m=+390.971136491 I0408 01:29:21.244812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bj8fj" condition "Ready" to 2026-04-08 01:29:21.24479499 +0000 UTC m=+390.983620668 I0408 01:29:21.265905 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:29:21.265879529 +0000 UTC m=+391.004705237 I0408 01:29:21.284016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:29:21.284445 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:29:21.284435571 +0000 UTC m=+391.023261259 I0408 01:29:21.297867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:29:21.298134 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:29:21.298124331 +0000 UTC m=+391.036950009 I0408 01:29:26.203898 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:29:26.203882829 +0000 UTC m=+395.942708527 I0408 01:30:07.625898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:30:07.625948 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 01:30:07.625939933 +0000 UTC m=+437.364765611 I0408 01:30:07.626940 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 01:30:07.626933402 +0000 UTC m=+437.365759090 I0408 01:30:07.629001 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 01:30:07.628985501 +0000 UTC m=+437.367811169 I0408 01:30:07.629439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:30:07.629532 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 01:30:07.629519631 +0000 UTC m=+437.368345319 I0408 01:30:07.631375 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 01:30:07.631370505 +0000 UTC m=+437.370196163 I0408 01:30:07.631564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:30:07.631583 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 01:30:07.631580709 +0000 UTC m=+437.370406377 I0408 01:30:07.662883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:07.662969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 01:30:07.662958264 +0000 UTC m=+437.401783942 I0408 01:30:07.669007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:07.669181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:30:07.669221 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 01:30:07.669211872 +0000 UTC m=+437.408037550 I0408 01:30:07.673851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:07.673924 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 01:30:07.673917342 +0000 UTC m=+437.412743280 I0408 01:30:07.773931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:07.811585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rxssh" condition "Approved" to 2026-04-08 01:30:07.811574879 +0000 UTC m=+437.550400547 I0408 01:30:07.838355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rxssh" condition "Ready" to 2026-04-08 01:30:07.838335105 +0000 UTC m=+437.577160813 I0408 01:30:07.867886 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:07.86762285 +0000 UTC m=+437.606448558 I0408 01:30:07.892164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:07.892638 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:07.892629714 +0000 UTC m=+437.631455392 I0408 01:30:07.927915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:07.932520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:07.943251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:07.973178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k6z8w" condition "Approved" to 2026-04-08 01:30:07.973163968 +0000 UTC m=+437.711989646 I0408 01:30:08.003734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k6z8w" condition "Ready" to 2026-04-08 01:30:08.003716877 +0000 UTC m=+437.742542605 I0408 01:30:08.206072 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:08.20605204 +0000 UTC m=+437.944877718 E0408 01:30:08.253732 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-tj4bs\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0408 01:30:08.456686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:08.457288 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:08.457276887 +0000 UTC m=+438.196102585 I0408 01:30:08.561962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zd5qm" condition "Approved" to 2026-04-08 01:30:08.56194606 +0000 UTC m=+438.300771738 I0408 01:30:09.169006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zd5qm" condition "Ready" to 2026-04-08 01:30:09.168992316 +0000 UTC m=+438.907817994 I0408 01:30:09.206678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:09.256635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0408 01:30:09.306503 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-q2j9q\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0408 01:30:09.552153 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-zd5qm" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-k5gjw" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0408 01:30:09.613868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:09.760564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x9rd7" condition "Approved" to 2026-04-08 01:30:09.760477829 +0000 UTC m=+439.499303527 I0408 01:30:10.065328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x9rd7" condition "Ready" to 2026-04-08 01:30:10.065311752 +0000 UTC m=+439.804137430 I0408 01:30:10.311255 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:10.311175838 +0000 UTC m=+440.050001546 I0408 01:30:10.403027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:10.403470 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:10.403459366 +0000 UTC m=+440.142285044 I0408 01:30:10.603965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:15.738603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:30:15.738662 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" condition "Issuing" to 2026-04-08 01:30:15.738647109 +0000 UTC m=+445.477472807 I0408 01:30:15.738669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" condition "Ready" to 2026-04-08 01:30:15.738657869 +0000 UTC m=+445.477483557 I0408 01:30:15.758378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-54bmk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:15.758658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:30:15.758723 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" condition "Issuing" to 2026-04-08 01:30:15.758711878 +0000 UTC m=+445.497537566 I0408 01:30:15.890774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-54bmk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:15.899094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-54bmk-vvdgc" condition "Approved" to 2026-04-08 01:30:15.899072117 +0000 UTC m=+445.637897795 I0408 01:30:15.921142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-54bmk-vvdgc" condition "Ready" to 2026-04-08 01:30:15.921123724 +0000 UTC m=+445.659949432 I0408 01:30:15.955755 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:15.9557305 +0000 UTC m=+445.694556198 I0408 01:30:15.981460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-54bmk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:16.040537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-54bmk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-54bmk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:41.407208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:30:41.407254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 01:30:41.407240539 +0000 UTC m=+471.146066217 I0408 01:30:41.409796 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 01:30:41.409772196 +0000 UTC m=+471.148598104 I0408 01:30:41.447612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:41.447696 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 01:30:41.44768756 +0000 UTC m=+471.186513228 I0408 01:30:41.523744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:41.559926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pnjph" condition "Approved" to 2026-04-08 01:30:41.559906255 +0000 UTC m=+471.298731923 I0408 01:30:41.580789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pnjph" condition "Ready" to 2026-04-08 01:30:41.580774317 +0000 UTC m=+471.319599995 I0408 01:30:41.607011 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:41.606991541 +0000 UTC m=+471.345817249 I0408 01:30:41.631913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:41.634029 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:41.63401742 +0000 UTC m=+471.372843088 I0408 01:30:41.641361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:41.650801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:33:57.219542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:33:57.220024 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 01:33:57.219438872 +0000 UTC m=+666.958264580 I0408 01:33:57.220024 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 01:33:57.219770118 +0000 UTC m=+666.958595866 I0408 01:33:57.242047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:33:57.242234 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 01:33:57.242209908 +0000 UTC m=+666.981035586 I0408 01:33:57.516960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:33:57.552762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7thzc" condition "Approved" to 2026-04-08 01:33:57.552735343 +0000 UTC m=+667.291561021 I0408 01:33:57.580543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7thzc" condition "Ready" to 2026-04-08 01:33:57.580525023 +0000 UTC m=+667.319350731 I0408 01:33:57.612038 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:33:57.612020353 +0000 UTC m=+667.350846051 I0408 01:33:57.634335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:33:57.634616 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:33:57.634609086 +0000 UTC m=+667.373434754 I0408 01:33:57.643684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:33:57.660936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:36:24.703402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:36:24.703464 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 01:36:24.703455746 +0000 UTC m=+814.442281434 I0408 01:36:24.703433 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 01:36:24.703386985 +0000 UTC m=+814.442212693 I0408 01:36:24.719062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:36:24.719167 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 01:36:24.719156628 +0000 UTC m=+814.457982306 I0408 01:36:24.811830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:36:24.847050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pkfhd" condition "Approved" to 2026-04-08 01:36:24.847038863 +0000 UTC m=+814.585864551 I0408 01:36:24.871445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pkfhd" condition "Ready" to 2026-04-08 01:36:24.871432857 +0000 UTC m=+814.610258535 I0408 01:36:24.898051 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:36:24.898034602 +0000 UTC m=+814.636860290 I0408 01:36:24.929323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:36:24.929725 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:36:24.92971714 +0000 UTC m=+814.668542818 I0408 01:36:24.932584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:36:24.945475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:36:24.945819 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:36:24.945809069 +0000 UTC m=+814.684634737 I0408 01:37:36.147898 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 01:37:36.147880657 +0000 UTC m=+885.886706365 I0408 01:37:36.150996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:37:36.151045 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 01:37:36.151034865 +0000 UTC m=+885.889860533 I0408 01:37:36.167107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:37:36.167198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:37:36.167229 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 01:37:36.167218006 +0000 UTC m=+885.906043704 I0408 01:37:36.294841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:37:36.303898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8kwkr" condition "Approved" to 2026-04-08 01:37:36.303877535 +0000 UTC m=+886.042703213 I0408 01:37:36.322176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8kwkr" condition "Ready" to 2026-04-08 01:37:36.322156745 +0000 UTC m=+886.060982423 I0408 01:37:36.361288 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:37:36.361271241 +0000 UTC m=+886.100096909 I0408 01:37:36.381789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:37:36.382141 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:37:36.382131459 +0000 UTC m=+886.120957137 I0408 01:37:36.399672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:40:45.517344 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 01:40:45.517307434 +0000 UTC m=+1075.256133142 I0408 01:40:45.517680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:40:45.517777 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 01:40:45.517768811 +0000 UTC m=+1075.256594489 I0408 01:40:45.536534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:40:45.536669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:40:45.536716 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 01:40:45.53670448 +0000 UTC m=+1075.275530178 I0408 01:40:45.728381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:40:45.735028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w52sp" condition "Approved" to 2026-04-08 01:40:45.735019008 +0000 UTC m=+1075.473844686 I0408 01:40:45.756127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w52sp" condition "Ready" to 2026-04-08 01:40:45.756114015 +0000 UTC m=+1075.494939693 I0408 01:40:45.785516 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:40:45.785505571 +0000 UTC m=+1075.524331249 I0408 01:40:45.814323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:40:45.870827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"