I0407 12:55:56.472026       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0407 12:55:56.472172       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0407 12:55:56.472267       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0407 12:55:56.477850       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0407 12:55:56.478456       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0407 12:55:56.478515       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0407 12:55:56.478641       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0407 12:55:56.482963       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0407 12:55:56.495805       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0407 12:55:56.500091       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0407 12:55:56.502558       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0407 12:55:56.502624       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0407 12:55:56.510313       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0407 12:55:56.512619       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0407 12:55:56.514939       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0407 12:55:56.517129       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0407 12:55:56.518908       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0407 12:55:56.520645       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0407 12:55:56.520667       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0407 12:55:56.520755       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0407 12:55:56.522632       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0407 12:55:56.528235       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0407 12:55:56.531554       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0407 12:55:56.533695       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0407 12:55:56.535781       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0407 12:55:56.537841       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0407 12:55:56.537869       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0407 12:55:56.537878       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0407 12:55:56.537950       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0407 12:55:56.540005       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0407 12:55:56.542132       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0407 12:55:56.544105       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0407 12:55:56.546995       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0407 12:55:56.550047       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.551474       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.551759       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.551890       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.551911       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.551961       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.552230       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.552531       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.552772       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:55:56.645524       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0407 12:56:07.158121       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 12:56:07.158102806 +0000 UTC m=+10.716783864
I0407 12:56:07.921908       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:07.921953       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 12:56:07.921945922 +0000 UTC m=+11.480626960
I0407 12:56:07.921968       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 12:56:07.921952612 +0000 UTC m=+11.480633670
E0407 12:56:07.933469       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 12:56:07.933549       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 12:56:07.933542611 +0000 UTC m=+11.492223649
E0407 12:56:07.933571       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 12:56:07.936850       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:07.936938       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:07.936960       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 12:56:07.936954543 +0000 UTC m=+11.495635581
E0407 12:56:07.944246       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0407 12:56:07.944336       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 12:56:07.944380       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 12:56:07.944436       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0407 12:56:07.968229       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hswd2" condition "Approved" to 2026-04-07 12:56:07.968216635 +0000 UTC m=+11.526897673
I0407 12:56:07.978907       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hswd2" condition "Ready" to 2026-04-07 12:56:07.978893512 +0000 UTC m=+11.537574550
I0407 12:56:08.000941       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:08.000924372 +0000 UTC m=+11.559605400
I0407 12:56:08.016433       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:08.016703       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:08.016696271 +0000 UTC m=+11.575377299
I0407 12:56:08.028124       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:08.028476       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:08.028468655 +0000 UTC m=+11.587149693
I0407 12:56:08.032107       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:12.945172       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:12.94515183 +0000 UTC m=+16.503832908
I0407 12:56:32.781277       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 12:56:32.781232446 +0000 UTC m=+36.339913474
I0407 12:56:32.781306       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:32.781528       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 12:56:32.781510423 +0000 UTC m=+36.340191491
I0407 12:56:32.795720       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 12:56:32.795708671 +0000 UTC m=+36.354389699
I0407 12:56:32.811244       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:32.811337       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:56:32.811421       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 12:56:32.811411884 +0000 UTC m=+36.370092922
I0407 12:56:32.946223       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:56:32.953521       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2wrws" condition "Approved" to 2026-04-07 12:56:32.953514198 +0000 UTC m=+36.512195236
I0407 12:56:32.980195       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2wrws" condition "Ready" to 2026-04-07 12:56:32.980180564 +0000 UTC m=+36.538861632
I0407 12:56:33.011992       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:56:33.01196745 +0000 UTC m=+36.570648518
I0407 12:56:33.033385       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:58:05.158842       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:58:05.158889       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 12:58:05.158869425 +0000 UTC m=+128.717550453
I0407 12:58:05.158943       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 12:58:05.158906586 +0000 UTC m=+128.717587674
I0407 12:58:05.181922       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:58:05.182193       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 12:58:05.182180944 +0000 UTC m=+128.740861982
E0407 12:58:05.182689       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0407 12:58:05.182742       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 12:58:05.182735337 +0000 UTC m=+128.741416365
I0407 12:58:05.182794       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0407 12:58:05.194732       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
E0407 12:58:05.194852       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0407 12:58:05.194964       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0407 12:58:05.195002       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0407 12:58:05.196660       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:58:05.196711       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 12:58:05.196699164 +0000 UTC m=+128.755380192
I0407 12:58:05.196827       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 12:58:05.196810987 +0000 UTC m=+128.755492025
I0407 12:58:05.212526       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:58:05.212593       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 12:58:05.212620       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 12:58:05.212613299 +0000 UTC m=+128.771294337
I0407 12:58:05.319182       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:58:05.345387       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9bsjd" condition "Approved" to 2026-04-07 12:58:05.345372403 +0000 UTC m=+128.904053461
I0407 12:58:05.376337       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9bsjd" condition "Ready" to 2026-04-07 12:58:05.376319011 +0000 UTC m=+128.935000069
I0407 12:58:05.399869       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:05.399850274 +0000 UTC m=+128.958531342
I0407 12:58:05.416654       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:58:05.511486       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:58:05.520416       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w9cgg" condition "Approved" to 2026-04-07 12:58:05.520398256 +0000 UTC m=+129.079079314
I0407 12:58:05.536566       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w9cgg" condition "Ready" to 2026-04-07 12:58:05.536553877 +0000 UTC m=+129.095234935
I0407 12:58:10.195826       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:10.19581101 +0000 UTC m=+133.754492048
I0407 12:58:10.213429       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-w9cgg" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:10.213418698 +0000 UTC m=+133.772099746
I0407 12:58:10.242523       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:10.242497679 +0000 UTC m=+133.801178717
I0407 12:58:10.261161       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0407 12:58:10.261788       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:10.261773517 +0000 UTC m=+133.820454575
I0407 12:58:10.284159       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:00:30.653064       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:00:30.653160       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-04-07 13:00:30.653136456 +0000 UTC m=+274.211817494
I0407 13:00:30.653160       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-04-07 13:00:30.653125035 +0000 UTC m=+274.211806093
I0407 13:00:30.673160       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:00:30.673359       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:00:30.673402       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-04-07 13:00:30.673394298 +0000 UTC m=+274.232075356
I0407 13:00:30.811629       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-rjg2t" condition "Approved" to 2026-04-07 13:00:30.811618282 +0000 UTC m=+274.370299320
I0407 13:00:30.831314       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-rjg2t" condition "Ready" to 2026-04-07 13:00:30.831304482 +0000 UTC m=+274.389985530
I0407 13:00:30.856922       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:30.856906712 +0000 UTC m=+274.415587780
I0407 13:00:30.880904       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:00:30.881172       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:30.881166169 +0000 UTC m=+274.439847207
I0407 13:00:30.895147       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:00:30.895593       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:30.895580513 +0000 UTC m=+274.454261581
I0407 13:00:30.896293       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:01:40.150882       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:01:40.150930       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 13:01:40.150919686 +0000 UTC m=+343.709600744
I0407 13:01:40.150924       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:01:40.150901646 +0000 UTC m=+343.709582714
E0407 13:01:40.162065       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 13:01:40.162099       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 13:01:40.162093733 +0000 UTC m=+343.720774771
E0407 13:01:40.162136       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0407 13:01:40.164402       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:01:40.164613       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:01:40.164596353 +0000 UTC m=+343.723277481
E0407 13:01:40.171714       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0407 13:01:40.171892       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 13:01:40.171947       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0407 13:01:40.171985       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0407 13:01:40.178649       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:01:40.200358       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4qz7m" condition "Approved" to 2026-04-07 13:01:40.200332599 +0000 UTC m=+343.759013657
I0407 13:01:40.214149       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4qz7m" condition "Ready" to 2026-04-07 13:01:40.21413385 +0000 UTC m=+343.772814908
I0407 13:01:40.233144       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:01:40.233118094 +0000 UTC m=+343.791799162
I0407 13:01:40.248928       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:01:40.249782       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:01:40.249769973 +0000 UTC m=+343.808451011
I0407 13:01:40.259605       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:01:40.272288       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:01:45.172785       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:01:45.172771709 +0000 UTC m=+348.731452777
I0407 13:02:21.114386       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:02:21.114431       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:02:21.114423446 +0000 UTC m=+384.673104474
I0407 13:02:21.114773       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 13:02:21.114766104 +0000 UTC m=+384.673447132
I0407 13:02:21.119976       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:02:21.120000       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 13:02:21.119995918 +0000 UTC m=+384.678676946
I0407 13:02:21.120166       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 13:02:21.120161642 +0000 UTC m=+384.678842690
I0407 13:02:21.120335       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:02:21.120351       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:02:21.120348267 +0000 UTC m=+384.679029295
I0407 13:02:21.120825       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 13:02:21.120814788 +0000 UTC m=+384.679495816
I0407 13:02:21.144802       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:21.144857       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 13:02:21.144851002 +0000 UTC m=+384.703532040
I0407 13:02:21.146814       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:21.146875       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:02:21.146903       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 13:02:21.146897171 +0000 UTC m=+384.705578209
I0407 13:02:21.148791       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:21.148846       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:02:21.148866       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:02:21.148859417 +0000 UTC m=+384.707540455
I0407 13:02:21.344867       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:21.360010       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8nvrl" condition "Approved" to 2026-04-07 13:02:21.359996177 +0000 UTC m=+384.918677225
I0407 13:02:21.383487       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8nvrl" condition "Ready" to 2026-04-07 13:02:21.383475617 +0000 UTC m=+384.942156665
I0407 13:02:21.417844       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:21.417828927 +0000 UTC m=+384.976509985
I0407 13:02:21.438324       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:21.479736       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:21.503406       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xnhxp" condition "Approved" to 2026-04-07 13:02:21.5033894 +0000 UTC m=+385.062070438
I0407 13:02:21.523201       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xnhxp" condition "Ready" to 2026-04-07 13:02:21.523188092 +0000 UTC m=+385.081869130
I0407 13:02:21.801503       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:21.848706       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qgnxg" condition "Approved" to 2026-04-07 13:02:21.848697201 +0000 UTC m=+385.407378229
I0407 13:02:22.154751       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qgnxg" condition "Ready" to 2026-04-07 13:02:22.154742706 +0000 UTC m=+385.713423724
I0407 13:02:22.249210       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-xnhxp" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-rqppt" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1"
I0407 13:02:22.549644       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:22.549627481 +0000 UTC m=+386.108308549
E0407 13:02:22.595696       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-rqppt\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls"
I0407 13:02:22.652721       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ml97c" condition "Approved" to 2026-04-07 13:02:22.652708442 +0000 UTC m=+386.211389480
I0407 13:02:22.749618       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:22.750121       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:22.750112327 +0000 UTC m=+386.308793395
I0407 13:02:23.112968       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ml97c" condition "Ready" to 2026-04-07 13:02:23.112955108 +0000 UTC m=+386.671636166
I0407 13:02:23.495554       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:23.545830       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:23.598609       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:23.598595359 +0000 UTC m=+387.157276417
I0407 13:02:23.746634       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:23.746989       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:23.74698215 +0000 UTC m=+387.305663188
I0407 13:02:23.946696       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:28.732799       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:02:28.732844       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" condition "Issuing" to 2026-04-07 13:02:28.732826814 +0000 UTC m=+392.291507852
I0407 13:02:28.733151       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" condition "Ready" to 2026-04-07 13:02:28.733146512 +0000 UTC m=+392.291827550
I0407 13:02:28.757998       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:28.758121       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" condition "Ready" to 2026-04-07 13:02:28.758106287 +0000 UTC m=+392.316787345
I0407 13:02:28.927387       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:28.955184       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ggn9x-2wkn2" condition "Approved" to 2026-04-07 13:02:28.955168721 +0000 UTC m=+392.513849759
I0407 13:02:28.973298       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ggn9x-2wkn2" condition "Ready" to 2026-04-07 13:02:28.973285613 +0000 UTC m=+392.531966651
I0407 13:02:29.003066       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:29.003052444 +0000 UTC m=+392.561733472
I0407 13:02:29.023402       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:29.023777       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:29.023766887 +0000 UTC m=+392.582447925
I0407 13:02:29.225825       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:29.231715       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ggn9x-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:49.565357       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:02:49.565418       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:02:49.565411621 +0000 UTC m=+413.124092649
I0407 13:02:49.565458       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 13:02:49.565432602 +0000 UTC m=+413.124113660
I0407 13:02:49.589941       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:49.590012       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 13:02:49.590004448 +0000 UTC m=+413.148685476
I0407 13:02:49.782012       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:49.816028       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k5wr2" condition "Approved" to 2026-04-07 13:02:49.816012573 +0000 UTC m=+413.374693631
I0407 13:02:49.840764       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-k5wr2" condition "Ready" to 2026-04-07 13:02:49.840749893 +0000 UTC m=+413.399430931
I0407 13:02:49.866501       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:49.866489198 +0000 UTC m=+413.425170216
I0407 13:02:49.906759       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:02:49.979660       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:06:18.170971       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:06:18.171007       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 13:06:18.170968444 +0000 UTC m=+621.729649522
I0407 13:06:18.171052       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 13:06:18.171040955 +0000 UTC m=+621.729722023
I0407 13:06:18.186461       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:06:18.186523       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:06:18.186539       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 13:06:18.186534385 +0000 UTC m=+621.745215423
I0407 13:06:18.388445       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8dk8z" condition "Approved" to 2026-04-07 13:06:18.388432859 +0000 UTC m=+621.947113897
I0407 13:06:18.408073       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8dk8z" condition "Ready" to 2026-04-07 13:06:18.408059908 +0000 UTC m=+621.966740956
I0407 13:06:18.432486       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:18.43247427 +0000 UTC m=+621.991155308
I0407 13:06:18.453378       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:06:18.453677       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:18.453672075 +0000 UTC m=+622.012353103
I0407 13:06:18.469884       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:09:06.594563       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 13:09:06.594527005 +0000 UTC m=+790.153208063
I0407 13:09:06.595196       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:09:06.595299       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 13:09:06.595288664 +0000 UTC m=+790.153969722
I0407 13:09:06.625989       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:09:06.626063       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 13:09:06.626055182 +0000 UTC m=+790.184736230
I0407 13:09:06.822700       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:09:06.859852       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6t94g" condition "Approved" to 2026-04-07 13:09:06.859841525 +0000 UTC m=+790.418522553
I0407 13:09:06.876614       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6t94g" condition "Ready" to 2026-04-07 13:09:06.876603031 +0000 UTC m=+790.435284069
I0407 13:09:06.900301       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:09:06.900287112 +0000 UTC m=+790.458968160
I0407 13:09:06.923695       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:10:29.214510       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:10:29.214590       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 13:10:29.214552371 +0000 UTC m=+872.773233409
I0407 13:10:29.215092       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 13:10:29.215075263 +0000 UTC m=+872.773756301
I0407 13:10:29.233681       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:10:29.233791       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 13:10:29.233782298 +0000 UTC m=+872.792463366
I0407 13:10:29.610556       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:10:29.638833       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-92tbd" condition "Approved" to 2026-04-07 13:10:29.638818809 +0000 UTC m=+873.197499847
I0407 13:10:29.657330       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-92tbd" condition "Ready" to 2026-04-07 13:10:29.657319049 +0000 UTC m=+873.216000087
I0407 13:10:29.698219       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:10:29.698204921 +0000 UTC m=+873.256885969
I0407 13:10:29.722909       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:13:32.165717       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 13:13:32.165665731 +0000 UTC m=+1055.724346769
I0407 13:13:32.166250       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0407 13:13:32.166273       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 13:13:32.166268885 +0000 UTC m=+1055.724949923
I0407 13:13:32.182276       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:13:32.182390       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 13:13:32.182358209 +0000 UTC m=+1055.741039257
I0407 13:13:32.290725       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:13:32.319547       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-h7gcb" condition "Approved" to 2026-04-07 13:13:32.319521734 +0000 UTC m=+1055.878202772
I0407 13:13:32.338855       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-h7gcb" condition "Ready" to 2026-04-07 13:13:32.338837874 +0000 UTC m=+1055.897518942
I0407 13:13:32.365226       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:13:32.365117271 +0000 UTC m=+1055.923798299
I0407 13:13:32.384837       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0407 13:13:32.385251       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:13:32.38524263 +0000 UTC m=+1055.943923678
I0407 13:13:32.402186       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"