I0403 01:39:52.991403 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0403 01:39:52.991571 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0403 01:39:52.991684 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0403 01:39:52.997053 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0403 01:39:52.997473 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0403 01:39:52.997595 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0403 01:39:52.997790 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0403 01:39:53.000155 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0403 01:39:53.016415 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0403 01:39:53.016689 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0403 01:39:53.023660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0403 01:39:53.029141 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0403 01:39:53.029214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0403 01:39:53.031991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0403 01:39:53.034772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0403 01:39:53.037409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0403 01:39:53.040565 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0403 01:39:53.042576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0403 01:39:53.049087 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0403 01:39:53.052015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0403 01:39:53.054252 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0403 01:39:53.054314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0403 01:39:53.056961 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0403 01:39:53.059195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0403 01:39:53.061357 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0403 01:39:53.061376 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0403 01:39:53.061397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0403 01:39:53.063364 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0403 01:39:53.066170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0403 01:39:53.071549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0403 01:39:53.074396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0403 01:39:53.076965 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0403 01:39:53.077333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0403 01:39:53.080028 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.080457 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.080943 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.094847 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.112800 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.129309 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.148232 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.163829 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.177046 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:39:53.194959 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 01:40:04.515721 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-03 01:40:04.51569107 +0000 UTC m=+11.558567628 I0403 01:40:05.212691 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-03 01:40:05.21267876 +0000 UTC m=+12.255555298 I0403 01:40:05.213001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:40:05.213063 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-03 01:40:05.213052777 +0000 UTC m=+12.255929315 E0403 01:40:05.226934 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 01:40:05.227044 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-03 01:40:05.227032595 +0000 UTC m=+12.269909153 E0403 01:40:05.227080 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 01:40:05.227434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:40:05.227524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:40:05.227551 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-03 01:40:05.227541235 +0000 UTC m=+12.270417773 E0403 01:40:05.235683 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0403 01:40:05.235784 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 01:40:05.235823 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 01:40:05.235867 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0403 01:40:05.276373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-st95w" condition "Approved" to 2026-04-03 01:40:05.276352667 +0000 UTC m=+12.319229235 I0403 01:40:05.293110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-st95w" condition "Ready" to 2026-04-03 01:40:05.293092207 +0000 UTC m=+12.335968765 I0403 01:40:05.313791 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:40:05.313771519 +0000 UTC m=+12.356648077 I0403 01:40:05.334048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:40:05.334514 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:40:05.334505343 +0000 UTC m=+12.377381911 I0403 01:40:05.344754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:40:05.347788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:40:05.349894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:40:05.350286 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:40:05.350270854 +0000 UTC m=+12.393147412 I0403 01:40:10.236337 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:40:10.236318434 +0000 UTC m=+17.279195002 I0403 01:40:32.964026 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-03 01:40:32.963954512 +0000 UTC m=+40.006831070 I0403 01:40:32.965945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:40:32.966000 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-03 01:40:32.9659879 +0000 UTC m=+40.008864468 I0403 01:40:32.973169 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-03 01:40:32.973151042 +0000 UTC m=+40.016027620 I0403 01:40:32.990777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:40:32.990871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:40:32.990906 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-03 01:40:32.990895941 +0000 UTC m=+40.033772479 I0403 01:40:33.246884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:40:33.262018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ttf2d" condition "Approved" to 2026-04-03 01:40:33.262007655 +0000 UTC m=+40.304884193 I0403 01:40:33.291259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ttf2d" condition "Ready" to 2026-04-03 01:40:33.291246277 +0000 UTC m=+40.334122815 I0403 01:40:33.365732 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:40:33.365716244 +0000 UTC m=+40.408592782 I0403 01:40:33.395422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:40:33.395868 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:40:33.395858702 +0000 UTC m=+40.438735260 I0403 01:40:33.422149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:42:18.124794 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-03 01:42:18.124728632 +0000 UTC m=+145.167605190 I0403 01:42:18.124826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:42:18.124860 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-03 01:42:18.124852185 +0000 UTC m=+145.167728743 E0403 01:42:18.139099 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0403 01:42:18.139182 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-03 01:42:18.139170169 +0000 UTC m=+145.182046737 I0403 01:42:18.139216 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0403 01:42:18.141263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:42:18.141336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:42:18.141352 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-03 01:42:18.141346669 +0000 UTC m=+145.184223197 E0403 01:42:18.153894 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0403 01:42:18.154232 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0403 01:42:18.154307 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0403 01:42:18.154463 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0403 01:42:18.155145 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:42:18.155177 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-03 01:42:18.155169495 +0000 UTC m=+145.198046033 I0403 01:42:18.155434 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-03 01:42:18.155419599 +0000 UTC m=+145.198296167 I0403 01:42:18.169397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:42:18.169548 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-03 01:42:18.169538079 +0000 UTC m=+145.212414617 I0403 01:42:18.413369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:42:18.423011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ppdlk" condition "Approved" to 2026-04-03 01:42:18.422993889 +0000 UTC m=+145.465870457 I0403 01:42:18.444590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-x7qbn" condition "Approved" to 2026-04-03 01:42:18.444575788 +0000 UTC m=+145.487452326 I0403 01:42:18.457086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ppdlk" condition "Ready" to 2026-04-03 01:42:18.457070649 +0000 UTC m=+145.499947227 I0403 01:42:18.463262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-x7qbn" condition "Ready" to 2026-04-03 01:42:18.463249282 +0000 UTC m=+145.506125820 I0403 01:42:18.481112 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:42:18.481093762 +0000 UTC m=+145.523970330 I0403 01:42:18.501134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:42:23.154955 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:42:23.154939905 +0000 UTC m=+150.197816473 I0403 01:42:23.170481 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-x7qbn" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:42:23.170466452 +0000 UTC m=+150.213342990 I0403 01:42:23.197097 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:42:23.197087583 +0000 UTC m=+150.239964121 I0403 01:42:23.221265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:42:23.222971 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:42:23.222959981 +0000 UTC m=+150.265836549 I0403 01:42:23.243112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:44:59.372288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:44:59.372320 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-04-03 01:44:59.372295554 +0000 UTC m=+306.415172142 I0403 01:44:59.372352 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-03 01:44:59.372344985 +0000 UTC m=+306.415221523 I0403 01:44:59.384918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:44:59.384996 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-04-03 01:44:59.384986758 +0000 UTC m=+306.427863296 I0403 01:44:59.645642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:44:59.676422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-fzftr" condition "Approved" to 2026-04-03 01:44:59.67641021 +0000 UTC m=+306.719286758 I0403 01:44:59.696939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-fzftr" condition "Ready" to 2026-04-03 01:44:59.696923759 +0000 UTC m=+306.739800317 I0403 01:44:59.723234 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:44:59.723218225 +0000 UTC m=+306.766094793 I0403 01:44:59.748486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:44:59.748749 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:44:59.748740586 +0000 UTC m=+306.791617124 I0403 01:44:59.765192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:44:59.765656 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:44:59.765643189 +0000 UTC m=+306.808519757 I0403 01:46:08.419655 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-03 01:46:08.419599974 +0000 UTC m=+375.462476532 I0403 01:46:08.419705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:08.419743 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-03 01:46:08.419735036 +0000 UTC m=+375.462611574 I0403 01:46:08.433762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0403 01:46:08.433786 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 01:46:08.433817 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-03 01:46:08.433809926 +0000 UTC m=+375.476686464 E0403 01:46:08.433856 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 01:46:08.433856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:08.433990 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-03 01:46:08.433978169 +0000 UTC m=+375.476854737 E0403 01:46:08.442864 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0403 01:46:08.443242 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 01:46:08.443409 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 01:46:08.443649 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0403 01:46:08.471682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z4wsq" condition "Approved" to 2026-04-03 01:46:08.471664595 +0000 UTC m=+375.514541153 I0403 01:46:08.472204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:08.482040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z4wsq" condition "Ready" to 2026-04-03 01:46:08.482030937 +0000 UTC m=+375.524907465 I0403 01:46:08.500280 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:08.500264584 +0000 UTC m=+375.543141152 I0403 01:46:08.513138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:08.513634 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:08.513624621 +0000 UTC m=+375.556501189 I0403 01:46:08.520325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:08.529806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:13.444447 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:13.44443395 +0000 UTC m=+380.487310508 I0403 01:46:49.705270 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-03 01:46:49.705227964 +0000 UTC m=+416.748104502 I0403 01:46:49.706740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:49.706781 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-03 01:46:49.706772002 +0000 UTC m=+416.749648540 I0403 01:46:49.706880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:49.706930 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-03 01:46:49.706920375 +0000 UTC m=+416.749796953 I0403 01:46:49.707291 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-03 01:46:49.707286091 +0000 UTC m=+416.750162639 I0403 01:46:49.714281 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-03 01:46:49.71426901 +0000 UTC m=+416.757145558 I0403 01:46:49.714883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:49.714958 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-03 01:46:49.714952814 +0000 UTC m=+416.757829352 I0403 01:46:49.741688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:49.741773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:49.741812 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-03 01:46:49.741802949 +0000 UTC m=+416.784679507 I0403 01:46:49.743543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:49.743634 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-03 01:46:49.743627193 +0000 UTC m=+416.786503721 I0403 01:46:49.744113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:49.744177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:49.744204 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-03 01:46:49.744197614 +0000 UTC m=+416.787074152 I0403 01:46:49.930527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qcv7x" condition "Approved" to 2026-04-03 01:46:49.930508256 +0000 UTC m=+416.973384794 I0403 01:46:49.930647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:49.936865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bbvh5" condition "Approved" to 2026-04-03 01:46:49.936857813 +0000 UTC m=+416.979734351 I0403 01:46:49.957549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bbvh5" condition "Ready" to 2026-04-03 01:46:49.957538925 +0000 UTC m=+417.000415463 I0403 01:46:49.962026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qcv7x" condition "Ready" to 2026-04-03 01:46:49.962014478 +0000 UTC m=+417.004891016 I0403 01:46:50.004979 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:50.004962392 +0000 UTC m=+417.047838930 I0403 01:46:50.005066 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:50.005053603 +0000 UTC m=+417.047930141 I0403 01:46:50.018806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:50.019136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:50.019179 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:50.019172814 +0000 UTC m=+417.062049342 I0403 01:46:50.019474 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:50.019468049 +0000 UTC m=+417.062344587 I0403 01:46:50.200623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:50.299590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:50.299904 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:50.299896821 +0000 UTC m=+417.342773349 I0403 01:46:50.403108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:50.450008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:50.649717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:50.805337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jsn6f" condition "Approved" to 2026-04-03 01:46:50.805319149 +0000 UTC m=+417.848195717 I0403 01:46:50.859899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jsn6f" condition "Ready" to 2026-04-03 01:46:50.859880577 +0000 UTC m=+417.902757215 I0403 01:46:51.351006 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:51.35099329 +0000 UTC m=+418.393869808 I0403 01:46:51.451630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:51.451964 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:51.451955685 +0000 UTC m=+418.494832223 I0403 01:46:51.651388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:57.703165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:57.703220 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" condition "Issuing" to 2026-04-03 01:46:57.703214512 +0000 UTC m=+424.746091050 I0403 01:46:57.703166 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" condition "Ready" to 2026-04-03 01:46:57.703123361 +0000 UTC m=+424.745999929 I0403 01:46:57.720822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:57.720903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:46:57.720928 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" condition "Issuing" to 2026-04-03 01:46:57.720920481 +0000 UTC m=+424.763797029 I0403 01:46:57.836825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wf9kv-x8s86" condition "Approved" to 2026-04-03 01:46:57.836804998 +0000 UTC m=+424.879681566 I0403 01:46:57.851973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wf9kv-x8s86" condition "Ready" to 2026-04-03 01:46:57.851961818 +0000 UTC m=+424.894838346 I0403 01:46:57.879955 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:57.879944276 +0000 UTC m=+424.922820814 I0403 01:46:57.896002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:57.896405 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:57.896396531 +0000 UTC m=+424.939273059 I0403 01:46:57.910655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:46:57.910983 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:46:57.910966112 +0000 UTC m=+424.953842650 I0403 01:46:57.917496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wf9kv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:47:19.889723 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-03 01:47:19.889699222 +0000 UTC m=+446.932575760 I0403 01:47:19.890112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:47:19.890135 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-03 01:47:19.890130999 +0000 UTC m=+446.933007537 I0403 01:47:19.907887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:47:19.907960 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:47:19.907977 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-03 01:47:19.90797017 +0000 UTC m=+446.950846728 I0403 01:47:20.417535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-74dh9" condition "Approved" to 2026-04-03 01:47:20.4175218 +0000 UTC m=+447.460398338 I0403 01:47:20.439840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-74dh9" condition "Ready" to 2026-04-03 01:47:20.439826623 +0000 UTC m=+447.482703161 I0403 01:47:20.479336 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:47:20.479321934 +0000 UTC m=+447.522198472 I0403 01:47:20.499706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:47:20.500005 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:47:20.499999167 +0000 UTC m=+447.542875695 I0403 01:47:20.511058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:47:20.511853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:47:20.512035 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:47:20.512029681 +0000 UTC m=+447.554906209 I0403 01:50:34.029442 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-03 01:50:34.029402198 +0000 UTC m=+641.072278736 I0403 01:50:34.029974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:50:34.030023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-03 01:50:34.03001797 +0000 UTC m=+641.072894508 I0403 01:50:34.044518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:50:34.044608 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-03 01:50:34.044599408 +0000 UTC m=+641.087475956 I0403 01:50:34.185634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:50:34.214857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wzvxn" condition "Approved" to 2026-04-03 01:50:34.214835999 +0000 UTC m=+641.257712567 I0403 01:50:34.240199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wzvxn" condition "Ready" to 2026-04-03 01:50:34.240176266 +0000 UTC m=+641.283052844 I0403 01:50:34.270993 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:50:34.270978074 +0000 UTC m=+641.313854612 I0403 01:50:34.300656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:50:34.301130 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:50:34.301120519 +0000 UTC m=+641.343997057 I0403 01:50:34.324803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:50:34.325455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:50:34.325827 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:50:34.325815005 +0000 UTC m=+641.368691543 I0403 01:52:58.276901 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-03 01:52:58.27686131 +0000 UTC m=+785.319737848 I0403 01:52:58.277335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:52:58.277423 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-03 01:52:58.277412331 +0000 UTC m=+785.320288889 I0403 01:52:58.297933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:52:58.298021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:52:58.298043 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-03 01:52:58.298034292 +0000 UTC m=+785.340910860 I0403 01:52:58.583889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:52:58.595197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-746hb" condition "Approved" to 2026-04-03 01:52:58.595182532 +0000 UTC m=+785.638059070 I0403 01:52:58.615297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-746hb" condition "Ready" to 2026-04-03 01:52:58.615286233 +0000 UTC m=+785.658162771 I0403 01:52:58.645328 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:52:58.645310559 +0000 UTC m=+785.688187097 I0403 01:52:58.672903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:52:58.673369 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:52:58.673359896 +0000 UTC m=+785.716236434 I0403 01:52:58.680504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:52:58.695058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:54:06.317559 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-03 01:54:06.317503927 +0000 UTC m=+853.360380485 I0403 01:54:06.317578 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:54:06.317738 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-03 01:54:06.317732481 +0000 UTC m=+853.360609009 I0403 01:54:06.332545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:54:06.332630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:54:06.332648 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-03 01:54:06.332640487 +0000 UTC m=+853.375517025 I0403 01:54:06.544355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zv2fp" condition "Approved" to 2026-04-03 01:54:06.544334918 +0000 UTC m=+853.587211456 I0403 01:54:06.569296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zv2fp" condition "Ready" to 2026-04-03 01:54:06.569278929 +0000 UTC m=+853.612155497 I0403 01:54:06.599858 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:54:06.599841874 +0000 UTC m=+853.642718402 I0403 01:54:06.622338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:54:06.622686 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:54:06.622676215 +0000 UTC m=+853.665552753 I0403 01:54:06.641226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:57:07.974863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 01:57:07.974947 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-03 01:57:07.974935641 +0000 UTC m=+1035.017812209 I0403 01:57:07.974986 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-03 01:57:07.974150247 +0000 UTC m=+1035.017026815 I0403 01:57:07.995755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:57:07.995864 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-03 01:57:07.995852509 +0000 UTC m=+1035.038729067 I0403 01:57:08.171689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:57:08.202862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qqt6t" condition "Approved" to 2026-04-03 01:57:08.202847603 +0000 UTC m=+1035.245724141 I0403 01:57:08.220226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qqt6t" condition "Ready" to 2026-04-03 01:57:08.220214875 +0000 UTC m=+1035.263091413 I0403 01:57:08.251448 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:57:08.251413713 +0000 UTC m=+1035.294290251 I0403 01:57:08.275645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:57:08.276192 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:57:08.276169421 +0000 UTC m=+1035.319045949 I0403 01:57:08.304493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 01:57:08.304975 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 01:57:08.304961516 +0000 UTC m=+1035.347838074