I0408 06:18:47.534727 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 06:18:47.534868 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 06:18:47.534982 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 06:18:47.541194 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 06:18:47.542375 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 06:18:47.542442 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 06:18:47.542452 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 06:18:47.546955 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 06:18:47.563924 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 06:18:47.570065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 06:18:47.572852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 06:18:47.575566 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 06:18:47.580324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 06:18:47.583007 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 06:18:47.583041 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 06:18:47.583138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 06:18:47.585594 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 06:18:47.588127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 06:18:47.590326 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 06:18:47.590505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 06:18:47.592348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 06:18:47.594151 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 06:18:47.594258 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 06:18:47.598185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 06:18:47.602555 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 06:18:47.602728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 06:18:47.604757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 06:18:47.606867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 06:18:47.609077 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 06:18:47.609127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 06:18:47.611723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 06:18:47.614301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 06:18:47.618035 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 06:18:47.620219 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.620545 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.621024 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.621341 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.621572 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.621778 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.622198 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.622452 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.623001 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:47.712611 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 06:18:59.182720 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 06:18:59.182679446 +0000 UTC m=+11.680292014 I0408 06:18:59.968867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:18:59.968930 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 06:18:59.968921412 +0000 UTC m=+12.466533950 I0408 06:18:59.969354 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 06:18:59.969332863 +0000 UTC m=+12.466945431 I0408 06:18:59.984521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:18:59.984641 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 06:18:59.984629553 +0000 UTC m=+12.482242101 E0408 06:18:59.985076 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 06:18:59.985195 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 06:18:59.985187867 +0000 UTC m=+12.482800405 E0408 06:18:59.985230 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 06:19:00.002295 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 06:19:00.002497 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 06:19:00.002555 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 06:19:00.002623 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 06:19:00.006340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:19:00.006408 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 06:19:00.006398599 +0000 UTC m=+12.504011147 I0408 06:19:00.011992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jrqn2" condition "Approved" to 2026-04-08 06:19:00.011982831 +0000 UTC m=+12.509595379 I0408 06:19:00.027026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jrqn2" condition "Ready" to 2026-04-08 06:19:00.027014874 +0000 UTC m=+12.524627422 I0408 06:19:00.055524 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:19:00.055512781 +0000 UTC m=+12.553125329 I0408 06:19:00.070915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:19:05.003670 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:19:05.003655943 +0000 UTC m=+17.501268491 I0408 06:19:26.559110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:19:26.559188 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 06:19:26.559180111 +0000 UTC m=+39.056792659 I0408 06:19:26.559554 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 06:19:26.559535409 +0000 UTC m=+39.057147957 I0408 06:19:26.566700 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 06:19:26.566682955 +0000 UTC m=+39.064295523 I0408 06:19:26.591192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:19:26.591317 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 06:19:26.59130601 +0000 UTC m=+39.088918568 I0408 06:19:26.686405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:19:26.727435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mpgnk" condition "Approved" to 2026-04-08 06:19:26.727413636 +0000 UTC m=+39.225026214 I0408 06:19:26.762069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mpgnk" condition "Ready" to 2026-04-08 06:19:26.762056918 +0000 UTC m=+39.259669466 I0408 06:19:26.793530 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:19:26.79347411 +0000 UTC m=+39.291086678 I0408 06:19:26.817126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:19:26.817516 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:19:26.817508871 +0000 UTC m=+39.315121419 I0408 06:19:26.827935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:19:26.839339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:09.737384 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 06:21:09.737347502 +0000 UTC m=+142.234960070 I0408 06:21:09.737635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:21:09.737885 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 06:21:09.737868255 +0000 UTC m=+142.235480893 E0408 06:21:09.751317 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 06:21:09.751387 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-08 06:21:09.751378051 +0000 UTC m=+142.248990599 I0408 06:21:09.751441 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 06:21:09.757903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:09.757986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:21:09.758005 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 06:21:09.75799827 +0000 UTC m=+142.255610818 E0408 06:21:09.761051 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0408 06:21:09.761476 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 06:21:09.761551 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 06:21:09.761612 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 06:21:09.767329 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:21:09.767367 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 06:21:09.767358629 +0000 UTC m=+142.264971207 I0408 06:21:09.767788 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 06:21:09.76777376 +0000 UTC m=+142.265386328 I0408 06:21:09.784181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:09.784288 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 06:21:09.784279122 +0000 UTC m=+142.281891680 I0408 06:21:09.959576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:09.986753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rm644" condition "Approved" to 2026-04-08 06:21:09.986735377 +0000 UTC m=+142.484347965 I0408 06:21:10.007059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rm644" condition "Ready" to 2026-04-08 06:21:10.007045816 +0000 UTC m=+142.504658364 I0408 06:21:10.096653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:10.107539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-87hj2" condition "Approved" to 2026-04-08 06:21:10.107525404 +0000 UTC m=+142.605137952 I0408 06:21:10.135175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-87hj2" condition "Ready" to 2026-04-08 06:21:10.135163641 +0000 UTC m=+142.632776179 I0408 06:21:10.167642 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:21:10.16762039 +0000 UTC m=+142.665232918 I0408 06:21:10.187660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:10.233654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:14.761583 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:21:14.761571806 +0000 UTC m=+147.259184354 I0408 06:21:14.779530 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-rm644" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:21:14.779514685 +0000 UTC m=+147.277127223 I0408 06:21:14.809385 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:21:14.809370407 +0000 UTC m=+147.306982955 I0408 06:21:14.827866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:14.828091 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:21:14.828084896 +0000 UTC m=+147.325697434 I0408 06:21:14.846820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:21:14.847172 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:21:14.847163944 +0000 UTC m=+147.344776492 I0408 06:23:51.742306 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:23:51.742671 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready" to 2026-04-08 06:23:51.74265487 +0000 UTC m=+304.240267408 I0408 06:23:51.742690 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Issuing" to 2026-04-08 06:23:51.742347662 +0000 UTC m=+304.239960200 I0408 06:23:51.760660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:23:51.760804 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready" to 2026-04-08 06:23:51.760788495 +0000 UTC m=+304.258401123 I0408 06:23:51.952577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:23:51.989901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-w9pxg" condition "Approved" to 2026-04-08 06:23:51.98987814 +0000 UTC m=+304.487490688 I0408 06:23:52.009614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-w9pxg" condition "Ready" to 2026-04-08 06:23:52.009599159 +0000 UTC m=+304.507211717 I0408 06:23:52.043259 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:23:52.043238017 +0000 UTC m=+304.540850575 I0408 06:23:52.061902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:23:52.062620 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:23:52.062609116 +0000 UTC m=+304.560221694 I0408 06:23:52.079282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:23:52.079622 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:23:52.07958827 +0000 UTC m=+304.577200808 I0408 06:25:04.263210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:25:04.263238 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 06:25:04.263191312 +0000 UTC m=+376.760803870 I0408 06:25:04.263253 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 06:25:04.263248204 +0000 UTC m=+376.760860752 E0408 06:25:04.275245 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 06:25:04.275304 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 06:25:04.275291692 +0000 UTC m=+376.772904270 E0408 06:25:04.275466 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 06:25:04.276046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:04.276135 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 06:25:04.276123365 +0000 UTC m=+376.773735943 E0408 06:25:04.289692 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 06:25:04.289834 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 06:25:04.289897 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 06:25:04.289971 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 06:25:04.292716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:04.316639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j4bfx" condition "Approved" to 2026-04-08 06:25:04.3166275 +0000 UTC m=+376.814240048 I0408 06:25:04.328871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j4bfx" condition "Ready" to 2026-04-08 06:25:04.328863164 +0000 UTC m=+376.826475702 I0408 06:25:04.348563 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:04.348543681 +0000 UTC m=+376.846156249 I0408 06:25:04.362193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:04.362383 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:04.362375298 +0000 UTC m=+376.859987836 I0408 06:25:04.379170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:04.379636 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:04.379623969 +0000 UTC m=+376.877236537 I0408 06:25:09.290261 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:09.290241414 +0000 UTC m=+381.787853982 I0408 06:25:50.032213 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 06:25:50.032203293 +0000 UTC m=+422.529815831 I0408 06:25:50.032397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:25:50.032411 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 06:25:50.032408488 +0000 UTC m=+422.530021026 I0408 06:25:50.038142 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 06:25:50.038126414 +0000 UTC m=+422.535738962 I0408 06:25:50.038207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:25:50.038258 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 06:25:50.038247097 +0000 UTC m=+422.535859655 I0408 06:25:50.039754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:25:50.039789 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 06:25:50.039782409 +0000 UTC m=+422.537394957 I0408 06:25:50.040144 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 06:25:50.040139918 +0000 UTC m=+422.537752486 I0408 06:25:50.069059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:50.069120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:25:50.069136 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 06:25:50.069131887 +0000 UTC m=+422.566744425 I0408 06:25:50.076113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:50.076196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:25:50.076232 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 06:25:50.07622386 +0000 UTC m=+422.573836418 I0408 06:25:50.077822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:50.077882 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 06:25:50.077876225 +0000 UTC m=+422.575488773 I0408 06:25:50.305371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:50.311314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fhr7l" condition "Approved" to 2026-04-08 06:25:50.311300053 +0000 UTC m=+422.808912631 I0408 06:25:50.339954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:50.341556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fhr7l" condition "Ready" to 2026-04-08 06:25:50.341545035 +0000 UTC m=+422.839157583 I0408 06:25:50.365351 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:50.365342873 +0000 UTC m=+422.862955411 I0408 06:25:50.440221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:50.471474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:50.474763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vqlpx" condition "Approved" to 2026-04-08 06:25:50.474748118 +0000 UTC m=+422.972360666 I0408 06:25:50.490594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vqlpx" condition "Ready" to 2026-04-08 06:25:50.490581129 +0000 UTC m=+422.988193677 I0408 06:25:50.588840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tm2sf" condition "Approved" to 2026-04-08 06:25:50.588822151 +0000 UTC m=+423.086434699 I0408 06:25:50.821460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:51.131601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tm2sf" condition "Ready" to 2026-04-08 06:25:51.131591251 +0000 UTC m=+423.629203789 I0408 06:25:51.227451 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:51.227434618 +0000 UTC m=+423.725047146 I0408 06:25:51.380731 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-tm2sf" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-4wrc2" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0408 06:25:51.524828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:51.525343 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:51.52533311 +0000 UTC m=+424.022945658 I0408 06:25:51.879597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kn7fv" condition "Approved" to 2026-04-08 06:25:51.879574972 +0000 UTC m=+424.377187540 I0408 06:25:51.925587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:51.974982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:52.331366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kn7fv" condition "Ready" to 2026-04-08 06:25:52.331351949 +0000 UTC m=+424.828964487 I0408 06:25:52.573768 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:52.573752621 +0000 UTC m=+425.071365179 I0408 06:25:52.674708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:58.489983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:25:58.490047 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls" condition "Issuing" to 2026-04-08 06:25:58.490039438 +0000 UTC m=+430.987651986 I0408 06:25:58.490139 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls" condition "Ready" to 2026-04-08 06:25:58.49011884 +0000 UTC m=+430.987731408 I0408 06:25:58.512984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:58.514571 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls" condition "Ready" to 2026-04-08 06:25:58.514560944 +0000 UTC m=+431.012173482 I0408 06:25:58.662898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:25:58.718081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nt7sx-cxzm7" condition "Approved" to 2026-04-08 06:25:58.718057039 +0000 UTC m=+431.215669587 I0408 06:25:58.740507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nt7sx-cxzm7" condition "Ready" to 2026-04-08 06:25:58.740493079 +0000 UTC m=+431.238105637 I0408 06:25:58.774929 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:25:58.774908095 +0000 UTC m=+431.272520643 I0408 06:25:58.800955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nt7sx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:26:19.953786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:26:19.953840 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 06:26:19.953825806 +0000 UTC m=+452.451438344 I0408 06:26:19.954330 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 06:26:19.953681882 +0000 UTC m=+452.451294430 I0408 06:26:19.973639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:26:19.973781 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 06:26:19.973767178 +0000 UTC m=+452.471379756 I0408 06:26:20.116569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:26:20.149913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wkffj" condition "Approved" to 2026-04-08 06:26:20.149891888 +0000 UTC m=+452.647504436 I0408 06:26:20.175470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wkffj" condition "Ready" to 2026-04-08 06:26:20.175454653 +0000 UTC m=+452.673067191 I0408 06:26:20.209395 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:26:20.209376156 +0000 UTC m=+452.706988704 I0408 06:26:20.227575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:26:20.283849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:29:41.109833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:29:41.109817 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 06:29:41.109778645 +0000 UTC m=+653.607391193 I0408 06:29:41.110156 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 06:29:41.110148785 +0000 UTC m=+653.607761353 I0408 06:29:41.129410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:29:41.129537 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 06:29:41.129525363 +0000 UTC m=+653.627137941 I0408 06:29:41.353392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:29:41.390266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tpmm4" condition "Approved" to 2026-04-08 06:29:41.39024992 +0000 UTC m=+653.887862468 I0408 06:29:41.415865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tpmm4" condition "Ready" to 2026-04-08 06:29:41.415853537 +0000 UTC m=+653.913466085 I0408 06:29:41.447275 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:29:41.447258162 +0000 UTC m=+653.944870700 I0408 06:29:41.468663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:29:41.469102 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:29:41.469090367 +0000 UTC m=+653.966702935 I0408 06:29:41.495393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:32:07.398385 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 06:32:07.398365684 +0000 UTC m=+799.895978262 I0408 06:32:07.399219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:32:07.399309 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 06:32:07.39930188 +0000 UTC m=+799.896914418 I0408 06:32:07.415374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:32:07.415669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:32:07.415770 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 06:32:07.415692036 +0000 UTC m=+799.913304584 I0408 06:32:07.624939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-5fns6" condition "Approved" to 2026-04-08 06:32:07.624915359 +0000 UTC m=+800.122527967 I0408 06:32:07.650606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-5fns6" condition "Ready" to 2026-04-08 06:32:07.650588408 +0000 UTC m=+800.148200956 I0408 06:32:07.684191 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:32:07.684170732 +0000 UTC m=+800.181783260 I0408 06:32:07.709383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:32:07.709970 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:32:07.709958403 +0000 UTC m=+800.207570941 I0408 06:32:07.736260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:32:07.736385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:32:07.736581 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:32:07.736570888 +0000 UTC m=+800.234183426 I0408 06:33:11.831485 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 06:33:11.831466926 +0000 UTC m=+864.329079494 I0408 06:33:11.831880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:33:11.831911 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 06:33:11.831901568 +0000 UTC m=+864.329514116 I0408 06:33:11.848982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:33:11.849079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:33:11.849108 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 06:33:11.849100146 +0000 UTC m=+864.346712694 I0408 06:33:11.997913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-87ndb" condition "Approved" to 2026-04-08 06:33:11.997899535 +0000 UTC m=+864.495512073 I0408 06:33:12.018857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-87ndb" condition "Ready" to 2026-04-08 06:33:12.018843395 +0000 UTC m=+864.516455943 I0408 06:33:12.054791 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:33:12.054778282 +0000 UTC m=+864.552390820 I0408 06:33:12.077263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:33:12.077576 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:33:12.077566673 +0000 UTC m=+864.575179221 I0408 06:33:12.098762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:36:15.772478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:36:15.772652 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 06:36:15.772639752 +0000 UTC m=+1048.270252330 I0408 06:36:15.772666 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 06:36:15.772643462 +0000 UTC m=+1048.270256010 I0408 06:36:15.792677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 06:36:15.792868 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 06:36:15.792918 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 06:36:15.792908709 +0000 UTC m=+1048.290521267 I0408 06:36:16.031111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8qgh7" condition "Approved" to 2026-04-08 06:36:16.031096096 +0000 UTC m=+1048.528708644 I0408 06:36:16.052542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8qgh7" condition "Ready" to 2026-04-08 06:36:16.052523307 +0000 UTC m=+1048.550135885 I0408 06:36:16.082542 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 06:36:16.082527006 +0000 UTC m=+1048.580139554 I0408 06:36:16.104749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"