I0312 13:53:02.488351 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0312 13:53:02.488763 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0312 13:53:02.488926 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0312 13:53:02.493895 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0312 13:53:02.494314 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0312 13:53:02.494474 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0312 13:53:02.494414 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0312 13:53:02.496407 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0312 13:53:02.512453 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0312 13:53:02.519151 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0312 13:53:02.526123 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0312 13:53:02.526198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0312 13:53:02.530430 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0312 13:53:02.530486 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0312 13:53:02.534271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0312 13:53:02.536244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0312 13:53:02.538213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0312 13:53:02.539976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0312 13:53:02.544064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0312 13:53:02.548647 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0312 13:53:02.548732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0312 13:53:02.552845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0312 13:53:02.555756 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0312 13:53:02.557991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0312 13:53:02.559768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0312 13:53:02.559786 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0312 13:53:02.559793 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0312 13:53:02.559909 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0312 13:53:02.561818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0312 13:53:02.563935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0312 13:53:02.565678 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0312 13:53:02.567954 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0312 13:53:02.573637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0312 13:53:02.577207 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.577220 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.578042 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.594545 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.614490 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.616941 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.639231 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.658032 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.677188 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:02.696355 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0312 13:53:16.239913 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-12 13:53:16.239895013 +0000 UTC m=+13.787888777 I0312 13:53:16.985929 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-12 13:53:16.985909863 +0000 UTC m=+14.533903667 I0312 13:53:16.986042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 13:53:16.987354 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-12 13:53:16.987338828 +0000 UTC m=+14.535332612 E0312 13:53:17.001870 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0312 13:53:17.002570 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-12 13:53:17.002548608 +0000 UTC m=+14.550542372 E0312 13:53:17.002652 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0312 13:53:17.005792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:53:17.006028 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-12 13:53:17.006010627 +0000 UTC m=+14.554004401 E0312 13:53:17.014642 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0312 13:53:17.014825 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0312 13:53:17.014878 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0312 13:53:17.014983 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0312 13:53:17.030180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:53:17.055658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j59l2" condition "Approved" to 2026-03-12 13:53:17.055644652 +0000 UTC m=+14.603638426 I0312 13:53:17.068363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j59l2" condition "Ready" to 2026-03-12 13:53:17.068350803 +0000 UTC m=+14.616344547 I0312 13:53:17.087898 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:53:17.087885779 +0000 UTC m=+14.635879523 I0312 13:53:17.107830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:53:17.153306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:53:22.015278 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:53:22.015240893 +0000 UTC m=+19.563234657 I0312 13:53:41.432590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 13:53:41.432631 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-12 13:53:41.432620697 +0000 UTC m=+38.980614441 I0312 13:53:41.432721 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-12 13:53:41.432691899 +0000 UTC m=+38.980685643 I0312 13:53:41.449920 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-12 13:53:41.449904502 +0000 UTC m=+38.997898246 I0312 13:53:41.466160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:53:41.466263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 13:53:41.466290 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-12 13:53:41.466282768 +0000 UTC m=+39.014276522 I0312 13:53:41.777421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:53:41.787150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fqdcw" condition "Approved" to 2026-03-12 13:53:41.787135239 +0000 UTC m=+39.335128983 I0312 13:53:41.816928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fqdcw" condition "Ready" to 2026-03-12 13:53:41.816908428 +0000 UTC m=+39.364902202 I0312 13:53:41.849004 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:53:41.84899087 +0000 UTC m=+39.396984604 I0312 13:53:41.879661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:53:41.879989 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:53:41.879982037 +0000 UTC m=+39.427975771 I0312 13:53:41.888849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:53:41.906939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:56:10.945388 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-12 13:56:10.945325397 +0000 UTC m=+188.493319171 I0312 13:56:10.945419 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 13:56:10.945514 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-12 13:56:10.945502322 +0000 UTC m=+188.493496096 E0312 13:56:10.964085 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0312 13:56:10.964142 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-12 13:56:10.964135428 +0000 UTC m=+188.512129172 I0312 13:56:10.964327 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0312 13:56:10.964373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:56:10.964462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 13:56:10.964527 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-12 13:56:10.964519549 +0000 UTC m=+188.512513293 E0312 13:56:10.974018 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0312 13:56:10.974109 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0312 13:56:10.974133 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0312 13:56:10.974159 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0312 13:56:10.977979 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-12 13:56:10.977962169 +0000 UTC m=+188.525955913 I0312 13:56:10.978116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 13:56:10.978163 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-12 13:56:10.978153204 +0000 UTC m=+188.526146948 I0312 13:56:10.992720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:56:10.992787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 13:56:10.992812 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-12 13:56:10.992805278 +0000 UTC m=+188.540799022 I0312 13:56:11.157070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:56:11.179454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-8vkwk" condition "Approved" to 2026-03-12 13:56:11.178907564 +0000 UTC m=+188.726901368 I0312 13:56:11.213901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-8vkwk" condition "Ready" to 2026-03-12 13:56:11.213886522 +0000 UTC m=+188.761880256 I0312 13:56:11.238670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:56:11.242405 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:56:11.242394497 +0000 UTC m=+188.790388231 I0312 13:56:11.244950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-7qcg7" condition "Approved" to 2026-03-12 13:56:11.244943209 +0000 UTC m=+188.792936943 I0312 13:56:11.263167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-7qcg7" condition "Ready" to 2026-03-12 13:56:11.263152484 +0000 UTC m=+188.811146218 I0312 13:56:11.264802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:56:11.266179 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:56:11.266170189 +0000 UTC m=+188.814163933 I0312 13:56:11.278971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:56:11.279293 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:56:11.27928443 +0000 UTC m=+188.827278184 I0312 13:56:15.974379 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:56:15.974371218 +0000 UTC m=+193.522364952 I0312 13:56:15.993972 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-7qcg7" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:56:15.993959541 +0000 UTC m=+193.541953285 I0312 13:56:16.028784 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:56:16.028758634 +0000 UTC m=+193.576752378 I0312 13:56:16.047628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:59:02.355185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-36.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 13:59:02.355156 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready" to 2026-03-12 13:59:02.355120286 +0000 UTC m=+359.903114060 I0312 13:59:02.355233 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Issuing" to 2026-03-12 13:59:02.35522273 +0000 UTC m=+359.903216504 I0312 13:59:02.431967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:59:02.432053 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready" to 2026-03-12 13:59:02.432045045 +0000 UTC m=+359.980038789 I0312 13:59:02.704208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:59:02.759994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-36.nip.io-tls-g6tck" condition "Approved" to 2026-03-12 13:59:02.759981863 +0000 UTC m=+360.307975627 I0312 13:59:02.819606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-36.nip.io-tls-g6tck" condition "Ready" to 2026-03-12 13:59:02.819591409 +0000 UTC m=+360.367585183 I0312 13:59:02.882447 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:59:02.882435014 +0000 UTC m=+360.430428748 I0312 13:59:02.916319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 13:59:02.916892 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 13:59:02.916881135 +0000 UTC m=+360.464874899 I0312 13:59:02.949756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:14.740587 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-12 14:00:14.740572809 +0000 UTC m=+432.288566553 I0312 14:00:14.740775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:00:14.740992 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-12 14:00:14.740893799 +0000 UTC m=+432.288887573 E0312 14:00:14.754987 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0312 14:00:14.755035 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-12 14:00:14.755030047 +0000 UTC m=+432.303023791 E0312 14:00:14.755641 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0312 14:00:14.757519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:14.757749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:00:14.757832 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-12 14:00:14.757767832 +0000 UTC m=+432.305761576 E0312 14:00:14.767400 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0312 14:00:14.767486 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0312 14:00:14.767513 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0312 14:00:14.767540 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0312 14:00:14.789567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:14.794050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7nhlk" condition "Approved" to 2026-03-12 14:00:14.794029658 +0000 UTC m=+432.342023422 I0312 14:00:14.805696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7nhlk" condition "Ready" to 2026-03-12 14:00:14.80568317 +0000 UTC m=+432.353676914 I0312 14:00:14.825596 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:00:14.825579668 +0000 UTC m=+432.373573442 I0312 14:00:14.841815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:14.842040 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:00:14.842033249 +0000 UTC m=+432.390026993 I0312 14:00:14.855085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:14.857502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:19.768552 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:00:19.768535164 +0000 UTC m=+437.316528938 I0312 14:00:57.545264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:00:57.545312 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-12 14:00:57.545303213 +0000 UTC m=+475.093296977 I0312 14:00:57.546603 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-12 14:00:57.546586423 +0000 UTC m=+475.094580177 I0312 14:00:57.570562 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-12 14:00:57.570551508 +0000 UTC m=+475.118545262 I0312 14:00:57.570620 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-12 14:00:57.57060717 +0000 UTC m=+475.118600904 I0312 14:00:57.570804 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:00:57.570886 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-12 14:00:57.570881158 +0000 UTC m=+475.118874902 I0312 14:00:57.571107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:00:57.571131 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-12 14:00:57.571128126 +0000 UTC m=+475.119121850 I0312 14:00:57.602837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:57.602891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:00:57.602905 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-12 14:00:57.602900714 +0000 UTC m=+475.150894438 I0312 14:00:57.635664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:57.635727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:00:57.635743 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-12 14:00:57.635738576 +0000 UTC m=+475.183732310 I0312 14:00:57.642668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:57.642734 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-12 14:00:57.642727773 +0000 UTC m=+475.190721507 I0312 14:00:57.849549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f7d4d" condition "Approved" to 2026-03-12 14:00:57.849537075 +0000 UTC m=+475.397530809 I0312 14:00:57.854166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:57.868627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f7d4d" condition "Ready" to 2026-03-12 14:00:57.868615799 +0000 UTC m=+475.416609533 I0312 14:00:57.899133 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:00:57.899118938 +0000 UTC m=+475.447112672 I0312 14:00:57.921984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:57.922428 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:00:57.922419732 +0000 UTC m=+475.470413466 I0312 14:00:57.931688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:57.948656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:58.057266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lbfgg" condition "Approved" to 2026-03-12 14:00:58.057250885 +0000 UTC m=+475.605244619 I0312 14:00:58.075279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lbfgg" condition "Ready" to 2026-03-12 14:00:58.075267636 +0000 UTC m=+475.623261370 I0312 14:00:58.429892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:58.450926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2ddhx" condition "Approved" to 2026-03-12 14:00:58.450909949 +0000 UTC m=+475.998903683 I0312 14:00:58.468078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2ddhx" condition "Ready" to 2026-03-12 14:00:58.468064412 +0000 UTC m=+476.016058176 I0312 14:00:58.830492 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-lbfgg" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-876sc" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0312 14:00:59.055415 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:00:59.05540155 +0000 UTC m=+476.603395294 I0312 14:00:59.135023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z99xf" condition "Approved" to 2026-03-12 14:00:59.135004506 +0000 UTC m=+476.682998270 I0312 14:00:59.180791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:59.181351 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:00:59.181343467 +0000 UTC m=+476.729337211 I0312 14:00:59.546828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z99xf" condition "Ready" to 2026-03-12 14:00:59.546813233 +0000 UTC m=+477.094807007 I0312 14:00:59.780696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:00:59.832082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:00.082527 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:01:00.082457691 +0000 UTC m=+477.630451435 I0312 14:01:00.181788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:00.182186 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:01:00.182178783 +0000 UTC m=+477.730172527 I0312 14:01:00.380642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:06.535653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:01:06.535652 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" condition "Ready" to 2026-03-12 14:01:06.535630978 +0000 UTC m=+484.083624742 I0312 14:01:06.535690 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" condition "Issuing" to 2026-03-12 14:01:06.535682749 +0000 UTC m=+484.083676483 I0312 14:01:06.557357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-56xsj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:06.557556 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" condition "Ready" to 2026-03-12 14:01:06.55754567 +0000 UTC m=+484.105539444 I0312 14:01:07.190487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-56xsj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:07.219602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-56xsj-7mfmw" condition "Approved" to 2026-03-12 14:01:07.219586549 +0000 UTC m=+484.767580293 I0312 14:01:07.238446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-56xsj-7mfmw" condition "Ready" to 2026-03-12 14:01:07.238420855 +0000 UTC m=+484.786414589 I0312 14:01:07.269237 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:01:07.269219943 +0000 UTC m=+484.817213707 I0312 14:01:07.289583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-56xsj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:07.289925 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:01:07.289919787 +0000 UTC m=+484.837913511 I0312 14:01:07.310138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-56xsj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:07.310468 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:01:07.310459946 +0000 UTC m=+484.858453690 I0312 14:01:07.312763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-56xsj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-56xsj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:41.083716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:01:41.083771 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-12 14:01:41.083758826 +0000 UTC m=+518.631752600 I0312 14:01:41.084559 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-12 14:01:41.084536569 +0000 UTC m=+518.632530323 I0312 14:01:41.099150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:41.099303 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-12 14:01:41.099288981 +0000 UTC m=+518.647282755 I0312 14:01:41.346507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:41.375188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g5p6h" condition "Approved" to 2026-03-12 14:01:41.375170681 +0000 UTC m=+518.923164415 I0312 14:01:41.398575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g5p6h" condition "Ready" to 2026-03-12 14:01:41.398561117 +0000 UTC m=+518.946554851 I0312 14:01:41.427158 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:01:41.427145522 +0000 UTC m=+518.975139256 I0312 14:01:41.445845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:41.446271 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:01:41.446261276 +0000 UTC m=+518.994255020 I0312 14:01:41.454356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:41.467376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:01:41.467957 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:01:41.46794212 +0000 UTC m=+519.015935894 I0312 14:05:09.926024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:05:09.926214 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-12 14:05:09.926203294 +0000 UTC m=+727.474197078 I0312 14:05:09.926198 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-12 14:05:09.926181554 +0000 UTC m=+727.474175328 I0312 14:05:09.943164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:05:09.943290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:05:09.943337 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-12 14:05:09.943326865 +0000 UTC m=+727.491320639 I0312 14:05:10.148311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:05:10.156261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-swqbs" condition "Approved" to 2026-03-12 14:05:10.156245875 +0000 UTC m=+727.704239619 I0312 14:05:10.173142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-swqbs" condition "Ready" to 2026-03-12 14:05:10.173130558 +0000 UTC m=+727.721124292 I0312 14:05:10.215569 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:05:10.215549163 +0000 UTC m=+727.763542897 I0312 14:05:10.239160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:05:10.240288 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:05:10.24027957 +0000 UTC m=+727.788273314 I0312 14:05:10.257931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:05:10.258348 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:05:10.258337169 +0000 UTC m=+727.806330943 I0312 14:07:42.127527 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-12 14:07:42.127508739 +0000 UTC m=+879.675502483 I0312 14:07:42.127512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:07:42.127723 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-12 14:07:42.127707915 +0000 UTC m=+879.675701699 I0312 14:07:42.144650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:07:42.144813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:07:42.144853 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-12 14:07:42.144839768 +0000 UTC m=+879.692833512 I0312 14:07:42.294090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:07:42.301264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-j46hl" condition "Approved" to 2026-03-12 14:07:42.301254341 +0000 UTC m=+879.849248075 I0312 14:07:42.322167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-j46hl" condition "Ready" to 2026-03-12 14:07:42.322156742 +0000 UTC m=+879.870150486 I0312 14:07:42.353269 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:07:42.353258127 +0000 UTC m=+879.901251871 I0312 14:07:42.374224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:07:42.374890 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:07:42.374880592 +0000 UTC m=+879.922874356 I0312 14:07:42.382400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:07:42.399298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:07:42.399639 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:07:42.399632686 +0000 UTC m=+879.947626410 I0312 14:07:42.400761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:09:01.242579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:09:01.242609 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-12 14:09:01.242602484 +0000 UTC m=+958.790596228 I0312 14:09:01.242775 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-12 14:09:01.242762519 +0000 UTC m=+958.790756283 I0312 14:09:01.420011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:09:01.420128 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-12 14:09:01.420118074 +0000 UTC m=+958.968111838 I0312 14:09:01.873252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:09:01.959939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bd9gt" condition "Approved" to 2026-03-12 14:09:01.959917017 +0000 UTC m=+959.507910791 I0312 14:09:02.042178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bd9gt" condition "Ready" to 2026-03-12 14:09:02.04216951 +0000 UTC m=+959.590163244 I0312 14:09:02.198550 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:09:02.198534806 +0000 UTC m=+959.746528560 I0312 14:09:02.324148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:09:02.324411 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:09:02.32440464 +0000 UTC m=+959.872398384 I0312 14:09:02.395590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:09:02.404314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:12:06.784781 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-12 14:12:06.784731279 +0000 UTC m=+1144.332725023 I0312 14:12:06.784882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:12:06.784957 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-12 14:12:06.784949486 +0000 UTC m=+1144.332943260 I0312 14:12:06.803084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:12:06.803149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0312 14:12:06.803165 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-12 14:12:06.803160691 +0000 UTC m=+1144.351154435 I0312 14:12:06.970832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:12:06.982174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-cqqqp" condition "Approved" to 2026-03-12 14:12:06.982155582 +0000 UTC m=+1144.530149356 I0312 14:12:07.001736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-cqqqp" condition "Ready" to 2026-03-12 14:12:07.001725131 +0000 UTC m=+1144.549718865 I0312 14:12:07.038412 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:12:07.038397649 +0000 UTC m=+1144.586391393 I0312 14:12:07.061346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:12:07.064201 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:12:07.064194938 +0000 UTC m=+1144.612188672 I0312 14:12:07.080308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0312 14:12:07.080771 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-12 14:12:07.08076072 +0000 UTC m=+1144.628754494