I0402 06:09:42.394104 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 06:09:42.394241 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 06:09:42.394333 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 06:09:42.401667 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 06:09:42.402432 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 06:09:42.402537 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 06:09:42.402555 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 06:09:42.405750 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 06:09:42.423343 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 06:09:42.430371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 06:09:42.433018 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 06:09:42.437555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 06:09:42.440928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 06:09:42.443478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 06:09:42.446416 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 06:09:42.448876 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 06:09:42.448905 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 06:09:42.448909 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 06:09:42.448915 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 06:09:42.451660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 06:09:42.453978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 06:09:42.456102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 06:09:42.462654 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 06:09:42.462708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 06:09:42.466195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 06:09:42.468888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 06:09:42.471440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 06:09:42.473282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 06:09:42.475271 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 06:09:42.475374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 06:09:42.477377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 06:09:42.477398 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 06:09:42.480256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 06:09:42.482774 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.485115 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.487172 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.501550 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.517375 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.538099 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.553846 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.572658 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.586044 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:42.591510 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 06:09:54.731522 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 06:09:54.731499596 +0000 UTC m=+12.367622912 I0402 06:09:55.553808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:09:55.553919 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 06:09:55.553903653 +0000 UTC m=+13.190026979 I0402 06:09:55.554040 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 06:09:55.554013685 +0000 UTC m=+13.190137041 E0402 06:09:55.569074 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 06:09:55.569236 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 06:09:55.56922208 +0000 UTC m=+13.205345376 E0402 06:09:55.569276 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 06:09:55.571909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:09:55.572038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:09:55.572119 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 06:09:55.572111045 +0000 UTC m=+13.208234351 E0402 06:09:55.579399 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 06:09:55.579544 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 06:09:55.579625 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 06:09:55.579699 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 06:09:55.621463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qvpt2" condition "Approved" to 2026-04-02 06:09:55.621419824 +0000 UTC m=+13.257543120 I0402 06:09:55.638106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qvpt2" condition "Ready" to 2026-04-02 06:09:55.638091826 +0000 UTC m=+13.274215152 I0402 06:09:55.663802 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:09:55.663776683 +0000 UTC m=+13.299900009 I0402 06:09:55.684218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:09:55.730896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:10:00.580753 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:10:00.580740695 +0000 UTC m=+18.216864011 I0402 06:10:22.021627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:10:22.021715 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 06:10:22.021703563 +0000 UTC m=+39.657826869 I0402 06:10:22.022118 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 06:10:22.022030211 +0000 UTC m=+39.658153517 I0402 06:10:22.035732 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 06:10:22.035716767 +0000 UTC m=+39.671840043 I0402 06:10:22.043524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:10:22.043630 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 06:10:22.043618682 +0000 UTC m=+39.679741988 I0402 06:10:22.174070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:10:22.211384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4vjrl" condition "Approved" to 2026-04-02 06:10:22.211368864 +0000 UTC m=+39.847492160 I0402 06:10:22.249824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4vjrl" condition "Ready" to 2026-04-02 06:10:22.249813351 +0000 UTC m=+39.885936647 I0402 06:10:22.283466 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:10:22.283443144 +0000 UTC m=+39.919566470 I0402 06:10:22.309016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:10:22.310046 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:10:22.310037154 +0000 UTC m=+39.946160450 I0402 06:10:22.363918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:10:22.365020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:11:50.050115 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-02 06:11:50.050089996 +0000 UTC m=+127.686213312 I0402 06:11:50.050128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:11:50.050359 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 06:11:50.050338272 +0000 UTC m=+127.686461598 E0402 06:11:50.063311 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 06:11:50.063430 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-02 06:11:50.063412782 +0000 UTC m=+127.699536078 I0402 06:11:50.063480 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 06:11:50.072461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:11:50.072574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:11:50.072599 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 06:11:50.07259265 +0000 UTC m=+127.708715936 E0402 06:11:50.075003 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0402 06:11:50.075131 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 06:11:50.075165 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 06:11:50.075207 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0402 06:11:50.078519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:11:50.078576 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-02 06:11:50.078564674 +0000 UTC m=+127.714687990 I0402 06:11:50.079080 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 06:11:50.079072078 +0000 UTC m=+127.715195394 I0402 06:11:50.096658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:11:50.096748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:11:50.096771 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-02 06:11:50.096762797 +0000 UTC m=+127.732886093 I0402 06:11:50.455679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:11:50.458408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:11:50.464503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-z9x9t" condition "Approved" to 2026-04-02 06:11:50.46448959 +0000 UTC m=+128.100612876 I0402 06:11:50.469059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pn5hv" condition "Approved" to 2026-04-02 06:11:50.469046467 +0000 UTC m=+128.105169763 I0402 06:11:50.482370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-z9x9t" condition "Ready" to 2026-04-02 06:11:50.482357693 +0000 UTC m=+128.118480989 I0402 06:11:50.499962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pn5hv" condition "Ready" to 2026-04-02 06:11:50.49994615 +0000 UTC m=+128.136069446 I0402 06:11:50.532390 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:11:50.532378713 +0000 UTC m=+128.168502009 I0402 06:11:50.549159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:11:50.549494 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:11:50.549483777 +0000 UTC m=+128.185607073 I0402 06:11:50.569882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:11:55.076474 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:11:55.076455898 +0000 UTC m=+132.712579214 I0402 06:11:55.097321 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-z9x9t" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:11:55.097307239 +0000 UTC m=+132.733430565 I0402 06:11:55.132034 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:11:55.13201349 +0000 UTC m=+132.768136786 I0402 06:11:55.155810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:11:55.214506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:14:38.835353 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-84.nip.io-tls" condition "Ready" to 2026-04-02 06:14:38.835308487 +0000 UTC m=+296.471431803 I0402 06:14:38.835388 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-84.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:14:38.835803 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-84.nip.io-tls" condition "Issuing" to 2026-04-02 06:14:38.83578224 +0000 UTC m=+296.471905536 I0402 06:14:38.853931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-84.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-84.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:14:38.854082 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-84.nip.io-tls" condition "Ready" to 2026-04-02 06:14:38.854072912 +0000 UTC m=+296.490196228 I0402 06:14:38.961880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-84.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-84.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:14:38.993326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-84.nip.io-tls-zqvmt" condition "Approved" to 2026-04-02 06:14:38.993299311 +0000 UTC m=+296.629422627 I0402 06:14:39.013370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-84.nip.io-tls-zqvmt" condition "Ready" to 2026-04-02 06:14:39.013357759 +0000 UTC m=+296.649481055 I0402 06:14:39.043997 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-84.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:14:39.043985741 +0000 UTC m=+296.680109037 I0402 06:14:39.074003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-84.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-84.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:14:39.074727 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-84.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:14:39.074717315 +0000 UTC m=+296.710840621 I0402 06:14:39.092802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-84.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-84.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:14:39.096520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-84.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-84.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:14:39.097055 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-84.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:14:39.097043742 +0000 UTC m=+296.733167038 I0402 06:15:54.820511 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 06:15:54.820492095 +0000 UTC m=+372.456615421 I0402 06:15:54.820661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:15:54.820709 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 06:15:54.8207032 +0000 UTC m=+372.456826496 E0402 06:15:54.834186 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 06:15:54.834253 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 06:15:54.834242348 +0000 UTC m=+372.470365674 E0402 06:15:54.834451 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 06:15:54.835140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:15:54.835332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:15:54.835377 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 06:15:54.835367958 +0000 UTC m=+372.471491274 E0402 06:15:54.843047 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 06:15:54.843495 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 06:15:54.843612 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 06:15:54.843690 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 06:15:54.872770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fchc9" condition "Approved" to 2026-04-02 06:15:54.872756699 +0000 UTC m=+372.508880015 I0402 06:15:54.884966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fchc9" condition "Ready" to 2026-04-02 06:15:54.884952894 +0000 UTC m=+372.521076190 I0402 06:15:54.910694 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:15:54.910679515 +0000 UTC m=+372.546802811 I0402 06:15:54.929547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:15:54.929843 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:15:54.929836448 +0000 UTC m=+372.565959734 I0402 06:15:54.948283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:15:59.844300 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:15:59.84428382 +0000 UTC m=+377.480407146 I0402 06:16:39.062796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:16:39.062865 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 06:16:39.062848022 +0000 UTC m=+416.698971338 I0402 06:16:39.063014 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 06:16:39.062986606 +0000 UTC m=+416.699109912 I0402 06:16:39.071513 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 06:16:39.071491764 +0000 UTC m=+416.707615090 I0402 06:16:39.072208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:16:39.072235 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 06:16:39.072230132 +0000 UTC m=+416.708353428 I0402 06:16:39.086543 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 06:16:39.086524177 +0000 UTC m=+416.722647463 I0402 06:16:39.086549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:16:39.086875 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 06:16:39.086869376 +0000 UTC m=+416.722992662 I0402 06:16:39.100421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:39.100513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:16:39.100543 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 06:16:39.100535175 +0000 UTC m=+416.736658471 I0402 06:16:39.106300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:39.106367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:16:39.106388 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 06:16:39.106380285 +0000 UTC m=+416.742503581 I0402 06:16:39.110152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:39.110211 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 06:16:39.110205992 +0000 UTC m=+416.746329288 I0402 06:16:39.383816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:39.395887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fbf9m" condition "Approved" to 2026-04-02 06:16:39.395871418 +0000 UTC m=+417.031994714 I0402 06:16:39.427931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fbf9m" condition "Ready" to 2026-04-02 06:16:39.427918807 +0000 UTC m=+417.064042093 I0402 06:16:39.459801 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:16:39.45976038 +0000 UTC m=+417.095883676 I0402 06:16:39.490976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:39.491543 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:16:39.491533192 +0000 UTC m=+417.127656518 I0402 06:16:39.520672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:39.520965 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:16:39.520954913 +0000 UTC m=+417.157078209 I0402 06:16:39.526933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:39.564193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8zn72" condition "Approved" to 2026-04-02 06:16:39.564168167 +0000 UTC m=+417.200291473 I0402 06:16:39.584435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8zn72" condition "Ready" to 2026-04-02 06:16:39.584424044 +0000 UTC m=+417.220547330 I0402 06:16:39.646241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:16:39.646296 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 06:16:39.646286395 +0000 UTC m=+417.282409721 I0402 06:16:39.648920 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:16:39.648901452 +0000 UTC m=+417.285024768 I0402 06:16:39.811150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:39.811697 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:16:39.811686959 +0000 UTC m=+417.447810255 I0402 06:16:39.868604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4dxqg" condition "Approved" to 2026-04-02 06:16:39.868593432 +0000 UTC m=+417.504716718 I0402 06:16:39.919241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:40.126062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4dxqg" condition "Ready" to 2026-04-02 06:16:40.126048638 +0000 UTC m=+417.762171954 E0402 06:16:40.460641 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-8t5bn\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" E0402 06:16:40.730585 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-8wlxt\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0402 06:16:40.768016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qxb4f" condition "Approved" to 2026-04-02 06:16:40.767997725 +0000 UTC m=+418.404121041 I0402 06:16:40.812405 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:16:40.812384578 +0000 UTC m=+418.448507904 I0402 06:16:41.021529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qxb4f" condition "Ready" to 2026-04-02 06:16:41.021508719 +0000 UTC m=+418.657632035 I0402 06:16:41.259625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:41.660923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:42.010780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:42.060425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:47.107870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:16:47.107930 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" condition "Issuing" to 2026-04-02 06:16:47.107916155 +0000 UTC m=+424.744039451 I0402 06:16:47.107925 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" condition "Ready" to 2026-04-02 06:16:47.107894845 +0000 UTC m=+424.744018161 I0402 06:16:47.127935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:47.128010 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" condition "Ready" to 2026-04-02 06:16:47.128001408 +0000 UTC m=+424.764124684 I0402 06:16:47.338900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:47.371138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jr8s2-9qqqh" condition "Approved" to 2026-04-02 06:16:47.371126488 +0000 UTC m=+425.007249794 I0402 06:16:47.391850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jr8s2-9qqqh" condition "Ready" to 2026-04-02 06:16:47.391838946 +0000 UTC m=+425.027962242 I0402 06:16:47.423233 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:16:47.423217988 +0000 UTC m=+425.059341284 I0402 06:16:47.447652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:16:47.509873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jr8s2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:17:10.967766 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:17:10.967813 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 06:17:10.9678015 +0000 UTC m=+448.603924796 I0402 06:17:10.968182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 06:17:10.968158369 +0000 UTC m=+448.604281645 I0402 06:17:10.982710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:17:10.982800 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 06:17:10.982791972 +0000 UTC m=+448.618915288 I0402 06:17:11.106276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:17:11.146122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vpj8s" condition "Approved" to 2026-04-02 06:17:11.146104514 +0000 UTC m=+448.782227810 I0402 06:17:11.168322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vpj8s" condition "Ready" to 2026-04-02 06:17:11.168310001 +0000 UTC m=+448.804433297 I0402 06:17:11.197426 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:17:11.197407754 +0000 UTC m=+448.833531050 I0402 06:17:11.226899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:20:29.527051 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 06:20:29.527017299 +0000 UTC m=+647.163140615 I0402 06:20:29.527272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:20:29.527549 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 06:20:29.527346147 +0000 UTC m=+647.163469473 I0402 06:20:29.549210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:20:29.549328 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:20:29.549355 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 06:20:29.549350074 +0000 UTC m=+647.185473360 I0402 06:20:29.760357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zg6tq" condition "Approved" to 2026-04-02 06:20:29.760342674 +0000 UTC m=+647.396465970 I0402 06:20:29.778548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zg6tq" condition "Ready" to 2026-04-02 06:20:29.778539383 +0000 UTC m=+647.414662669 I0402 06:20:29.805625 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:20:29.80561497 +0000 UTC m=+647.441738266 I0402 06:20:29.869469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:20:29.869771 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:20:29.86976586 +0000 UTC m=+647.505889146 I0402 06:20:29.905503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:20:29.905872 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:20:29.90586504 +0000 UTC m=+647.541988326 I0402 06:23:00.927992 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 06:23:00.92797165 +0000 UTC m=+798.564094956 I0402 06:23:00.928304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:23:00.928400 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 06:23:00.92838834 +0000 UTC m=+798.564511686 I0402 06:23:00.947113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:23:00.947251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:23:00.947284 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 06:23:00.947274148 +0000 UTC m=+798.583397464 I0402 06:23:01.121197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7gl7v" condition "Approved" to 2026-04-02 06:23:01.121180123 +0000 UTC m=+798.757303419 I0402 06:23:01.149430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7gl7v" condition "Ready" to 2026-04-02 06:23:01.149411312 +0000 UTC m=+798.785534598 I0402 06:23:01.187129 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:23:01.187106626 +0000 UTC m=+798.823229922 I0402 06:23:01.219518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:23:01.219992 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:23:01.219980416 +0000 UTC m=+798.856103712 I0402 06:23:01.237466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:23:01.237754 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:23:01.237742475 +0000 UTC m=+798.873865751 I0402 06:24:13.600946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:24:13.601324 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 06:24:13.601302939 +0000 UTC m=+871.237426225 I0402 06:24:13.602986 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 06:24:13.602979642 +0000 UTC m=+871.239102928 I0402 06:24:13.623413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:24:13.623506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:24:13.623528 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 06:24:13.623521813 +0000 UTC m=+871.259645099 I0402 06:24:13.811506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:24:13.820181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mlzl8" condition "Approved" to 2026-04-02 06:24:13.820159114 +0000 UTC m=+871.456282410 I0402 06:24:13.850389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mlzl8" condition "Ready" to 2026-04-02 06:24:13.850371445 +0000 UTC m=+871.486494751 I0402 06:24:13.886989 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:24:13.886969251 +0000 UTC m=+871.523092537 I0402 06:24:13.913048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:24:13.913802 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:24:13.913793224 +0000 UTC m=+871.549916510 I0402 06:24:13.933408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:27:25.633347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 06:27:25.633420 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 06:27:25.633412967 +0000 UTC m=+1063.269536273 I0402 06:27:25.633786 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 06:27:25.633195352 +0000 UTC m=+1063.269318658 I0402 06:27:25.654379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:27:25.654459 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 06:27:25.654452539 +0000 UTC m=+1063.290575825 I0402 06:27:25.838187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:27:25.875032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zfpg2" condition "Approved" to 2026-04-02 06:27:25.875015482 +0000 UTC m=+1063.511138818 I0402 06:27:25.899994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zfpg2" condition "Ready" to 2026-04-02 06:27:25.899979075 +0000 UTC m=+1063.536102401 I0402 06:27:25.932192 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:27:25.932178305 +0000 UTC m=+1063.568301621 I0402 06:27:25.959825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:27:25.960064 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:27:25.960059433 +0000 UTC m=+1063.596182719 I0402 06:27:25.980543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 06:27:25.980931 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 06:27:25.980920731 +0000 UTC m=+1063.617044057