I0422 16:30:11.400977 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0422 16:30:11.401092 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0422 16:30:11.401156 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0422 16:30:11.404101 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0422 16:30:11.404480 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0422 16:30:11.404562 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0422 16:30:11.404692 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0422 16:30:11.406825 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0422 16:30:11.424146 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0422 16:30:11.429371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0422 16:30:11.435270 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0422 16:30:11.435308 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0422 16:30:11.435386 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0422 16:30:11.438265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0422 16:30:11.440514 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0422 16:30:11.442929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0422 16:30:11.445346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0422 16:30:11.447200 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0422 16:30:11.447248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0422 16:30:11.451379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0422 16:30:11.455500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0422 16:30:11.458894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0422 16:30:11.460936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0422 16:30:11.463584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0422 16:30:11.466401 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0422 16:30:11.466444 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0422 16:30:11.466541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0422 16:30:11.469143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0422 16:30:11.471552 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0422 16:30:11.474639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0422 16:30:11.478598 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0422 16:30:11.478651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0422 16:30:11.481183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0422 16:30:11.483391 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.483559 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.484749 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.485102 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.499256 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.516505 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.531048 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.552197 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.570401 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:11.572967 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:30:23.633180 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-22 16:30:23.633162638 +0000 UTC m=+12.267879911 I0422 16:30:24.329755 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 16:30:24.329736216 +0000 UTC m=+12.964453549 I0422 16:30:24.329795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:30:24.330186 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-22 16:30:24.330162938 +0000 UTC m=+12.964880181 E0422 16:30:24.342446 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 16:30:24.342547 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-22 16:30:24.342537555 +0000 UTC m=+12.977254808 E0422 16:30:24.342605 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 16:30:24.345794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:24.345864 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 16:30:24.345858028 +0000 UTC m=+12.980575271 E0422 16:30:24.352759 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0422 16:30:24.352941 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:30:24.353067 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:30:24.353114 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0422 16:30:24.362141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:24.386765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zsjpv" condition "Approved" to 2026-04-22 16:30:24.386749793 +0000 UTC m=+13.021467046 I0422 16:30:24.399528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-zsjpv" condition "Ready" to 2026-04-22 16:30:24.399515621 +0000 UTC m=+13.034232864 I0422 16:30:24.419389 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:30:24.419372937 +0000 UTC m=+13.054090220 I0422 16:30:24.444627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:29.353920 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:30:29.353897259 +0000 UTC m=+17.988614542 I0422 16:30:50.449757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:30:50.449790 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 16:30:50.449783235 +0000 UTC m=+39.084500488 I0422 16:30:50.449712 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 16:30:50.449637331 +0000 UTC m=+39.084354594 I0422 16:30:50.497004 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-22 16:30:50.496987667 +0000 UTC m=+39.131704940 I0422 16:30:50.500838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:50.500947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:30:50.500999 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 16:30:50.500989137 +0000 UTC m=+39.135706440 I0422 16:30:50.758838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fl8p6" condition "Approved" to 2026-04-22 16:30:50.758827439 +0000 UTC m=+39.393544692 I0422 16:30:50.792380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fl8p6" condition "Ready" to 2026-04-22 16:30:50.792367074 +0000 UTC m=+39.427084327 I0422 16:30:50.828041 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:30:50.828024687 +0000 UTC m=+39.462741960 I0422 16:30:50.852964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:50.853334 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:30:50.853327136 +0000 UTC m=+39.488044389 I0422 16:30:50.880401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:50.880839 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:30:50.880829434 +0000 UTC m=+39.515546697 I0422 16:32:24.443107 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-22 16:32:24.443062592 +0000 UTC m=+133.077779845 I0422 16:32:24.443355 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:32:24.443435 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-22 16:32:24.443401031 +0000 UTC m=+133.078118314 E0422 16:32:24.456758 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0422 16:32:24.456869 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-22 16:32:24.456859713 +0000 UTC m=+133.091576966 I0422 16:32:24.456928 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0422 16:32:24.459856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:24.459969 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-22 16:32:24.459954578 +0000 UTC m=+133.094671921 I0422 16:32:24.465392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:32:24.465395 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-22 16:32:24.465388658 +0000 UTC m=+133.100105921 I0422 16:32:24.465424 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-22 16:32:24.465415929 +0000 UTC m=+133.100133182 E0422 16:32:24.468141 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0422 16:32:24.468655 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0422 16:32:24.468686 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0422 16:32:24.468770 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0422 16:32:24.482292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:24.482391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:32:24.482421 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-22 16:32:24.482412388 +0000 UTC m=+133.117129661 I0422 16:32:24.578023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:24.607418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-td4zk" condition "Approved" to 2026-04-22 16:32:24.607405032 +0000 UTC m=+133.242122275 I0422 16:32:24.636524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-td4zk" condition "Ready" to 2026-04-22 16:32:24.636508026 +0000 UTC m=+133.271225309 I0422 16:32:24.663796 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:32:24.6637834 +0000 UTC m=+133.298500673 I0422 16:32:24.688789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:24.689166 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:32:24.689157101 +0000 UTC m=+133.323874354 I0422 16:32:24.705763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:24.706066 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:32:24.706057688 +0000 UTC m=+133.340774941 I0422 16:32:24.877782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:24.879784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6mkgm" condition "Approved" to 2026-04-22 16:32:24.879774196 +0000 UTC m=+133.514491439 I0422 16:32:24.896096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6mkgm" condition "Ready" to 2026-04-22 16:32:24.896082147 +0000 UTC m=+133.530799430 I0422 16:32:29.468909 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:32:29.468899738 +0000 UTC m=+138.103616991 I0422 16:32:29.484257 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-6mkgm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:32:29.484242972 +0000 UTC m=+138.118960255 I0422 16:32:29.515826 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:32:29.515811164 +0000 UTC m=+138.150528427 I0422 16:32:29.532922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:29.533312 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:32:29.533303997 +0000 UTC m=+138.168021250 I0422 16:32:29.540874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:29.549415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:29.550572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:32:29.550915 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:32:29.550907893 +0000 UTC m=+138.185625146 I0422 16:34:56.419673 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Ready" to 2026-04-22 16:34:56.419621517 +0000 UTC m=+285.054338800 I0422 16:34:56.419829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-179.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:34:56.419913 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Issuing" to 2026-04-22 16:34:56.419905325 +0000 UTC m=+285.054622568 I0422 16:34:56.436225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-179.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-179.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:34:56.436281 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Ready" to 2026-04-22 16:34:56.436275198 +0000 UTC m=+285.070992451 I0422 16:34:56.535359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-179.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-179.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:34:56.561906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-179.nip.io-tls-gwszw" condition "Approved" to 2026-04-22 16:34:56.561892402 +0000 UTC m=+285.196609675 I0422 16:34:56.582998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-179.nip.io-tls-gwszw" condition "Ready" to 2026-04-22 16:34:56.582985505 +0000 UTC m=+285.217702738 I0422 16:34:56.610056 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:34:56.610044874 +0000 UTC m=+285.244762117 I0422 16:34:56.633119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-179.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-179.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:34:56.633494 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:34:56.633488262 +0000 UTC m=+285.268205505 I0422 16:34:56.653573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-179.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-179.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:34:56.654034 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-179.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:34:56.65402617 +0000 UTC m=+285.288743413 I0422 16:36:08.386777 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 16:36:08.386718631 +0000 UTC m=+357.021435974 I0422 16:36:08.387418 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:08.387488 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-22 16:36:08.387476812 +0000 UTC m=+357.022194075 E0422 16:36:08.399719 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 16:36:08.399823 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-22 16:36:08.399813066 +0000 UTC m=+357.034530319 E0422 16:36:08.399937 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 16:36:08.402668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:08.402735 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:08.402753 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-22 16:36:08.402747627 +0000 UTC m=+357.037464870 E0422 16:36:08.413348 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0422 16:36:08.413533 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:36:08.413670 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:36:08.413811 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0422 16:36:08.437003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:08.440055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-h8tfs" condition "Approved" to 2026-04-22 16:36:08.440030066 +0000 UTC m=+357.074747319 I0422 16:36:08.452220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-h8tfs" condition "Ready" to 2026-04-22 16:36:08.452199035 +0000 UTC m=+357.086916308 I0422 16:36:08.472163 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:08.47214289 +0000 UTC m=+357.106860143 I0422 16:36:08.488722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:08.489107 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:08.489096082 +0000 UTC m=+357.123813355 I0422 16:36:08.501169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:13.414650 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:13.414634877 +0000 UTC m=+362.049352150 I0422 16:36:51.602585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:51.602632 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 16:36:51.602623339 +0000 UTC m=+400.237340602 I0422 16:36:51.602694 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-22 16:36:51.602685891 +0000 UTC m=+400.237403144 I0422 16:36:51.615896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:51.615932 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-22 16:36:51.615923709 +0000 UTC m=+400.250640972 I0422 16:36:51.617904 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-22 16:36:51.617895824 +0000 UTC m=+400.252613067 I0422 16:36:51.627383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:51.627417 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 16:36:51.627411109 +0000 UTC m=+400.262128352 I0422 16:36:51.627702 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-22 16:36:51.627696567 +0000 UTC m=+400.262413820 I0422 16:36:51.637676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:51.637758 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-22 16:36:51.637750757 +0000 UTC m=+400.272468000 I0422 16:36:51.655358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:51.655436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:51.655477 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 16:36:51.655469931 +0000 UTC m=+400.290187174 I0422 16:36:51.655604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:51.656844 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-22 16:36:51.656786427 +0000 UTC m=+400.291503670 I0422 16:36:51.893117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:51.993589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:52.023813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:52.034991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pcpb4" condition "Approved" to 2026-04-22 16:36:52.034973381 +0000 UTC m=+400.669690644 I0422 16:36:52.040679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xcz89" condition "Approved" to 2026-04-22 16:36:52.040667019 +0000 UTC m=+400.675384282 I0422 16:36:52.041360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s67s4" condition "Approved" to 2026-04-22 16:36:52.041354838 +0000 UTC m=+400.676072091 I0422 16:36:52.059256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pcpb4" condition "Ready" to 2026-04-22 16:36:52.059241946 +0000 UTC m=+400.693959189 I0422 16:36:52.064829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xcz89" condition "Ready" to 2026-04-22 16:36:52.064787861 +0000 UTC m=+400.699505114 I0422 16:36:52.065515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s67s4" condition "Ready" to 2026-04-22 16:36:52.065500891 +0000 UTC m=+400.700218134 I0422 16:36:52.350759 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:52.350745226 +0000 UTC m=+400.985462479 I0422 16:36:52.448774 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:52.448755525 +0000 UTC m=+401.083472798 I0422 16:36:52.596748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:52.597387 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:52.597377225 +0000 UTC m=+401.232094498 I0422 16:36:52.646017 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-s67s4" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-ld6kx" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0422 16:36:52.799157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:52.799482 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:52.799477554 +0000 UTC m=+401.434194797 I0422 16:36:53.298464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:53.400647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:53.455900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7j49n" condition "Approved" to 2026-04-22 16:36:53.455886155 +0000 UTC m=+402.090603398 I0422 16:36:53.497054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:53.549081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:53.658024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7j49n" condition "Ready" to 2026-04-22 16:36:53.658008344 +0000 UTC m=+402.292725617 I0422 16:36:54.201309 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:54.201294146 +0000 UTC m=+402.836011389 I0422 16:36:54.301466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:54.301798 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:54.301789425 +0000 UTC m=+402.936506668 I0422 16:36:54.501661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:59.412904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:59.412968 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" condition "Issuing" to 2026-04-22 16:36:59.412956711 +0000 UTC m=+408.047674144 I0422 16:36:59.412966 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" condition "Ready" to 2026-04-22 16:36:59.412946941 +0000 UTC m=+408.047664194 I0422 16:36:59.434483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:59.434639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:59.434673 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" condition "Issuing" to 2026-04-22 16:36:59.434665193 +0000 UTC m=+408.069382456 I0422 16:36:59.868004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6ncjz-wl422" condition "Approved" to 2026-04-22 16:36:59.867993153 +0000 UTC m=+408.502710396 I0422 16:36:59.890805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6ncjz-wl422" condition "Ready" to 2026-04-22 16:36:59.890794965 +0000 UTC m=+408.525512218 I0422 16:36:59.921711 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:59.921694382 +0000 UTC m=+408.556411635 I0422 16:36:59.941978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:59.942476 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:59.942465918 +0000 UTC m=+408.577183201 I0422 16:36:59.964893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6ncjz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:37:24.317126 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-22 16:37:24.317070673 +0000 UTC m=+432.951787926 I0422 16:37:24.317171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:37:24.317208 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-22 16:37:24.317201427 +0000 UTC m=+432.951918670 I0422 16:37:24.331133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:37:24.331217 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-22 16:37:24.331210396 +0000 UTC m=+432.965927649 I0422 16:37:24.880644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:37:24.908075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6n928" condition "Approved" to 2026-04-22 16:37:24.908063006 +0000 UTC m=+433.542780249 I0422 16:37:24.934270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6n928" condition "Ready" to 2026-04-22 16:37:24.934261523 +0000 UTC m=+433.568978766 I0422 16:37:24.961963 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:37:24.96194818 +0000 UTC m=+433.596665433 I0422 16:37:24.980573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:37:25.031146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:40:36.746755 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 16:40:36.746721936 +0000 UTC m=+625.381439209 I0422 16:40:36.746764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:40:36.746914 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-22 16:40:36.746906791 +0000 UTC m=+625.381624054 I0422 16:40:36.765291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:40:36.765407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:40:36.765435 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-22 16:40:36.765428339 +0000 UTC m=+625.400145592 I0422 16:40:36.917223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rcfv8" condition "Approved" to 2026-04-22 16:40:36.917209661 +0000 UTC m=+625.551926914 I0422 16:40:36.937192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rcfv8" condition "Ready" to 2026-04-22 16:40:36.937181789 +0000 UTC m=+625.571899042 I0422 16:40:36.967656 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:40:36.967639895 +0000 UTC m=+625.602357178 I0422 16:40:36.989141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:40:36.989565 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:40:36.989556355 +0000 UTC m=+625.624273618 I0422 16:40:37.001892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:40:37.011893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:43:05.002425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:43:05.002430 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-22 16:43:05.002396832 +0000 UTC m=+773.637114145 I0422 16:43:05.002492 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-22 16:43:05.002483345 +0000 UTC m=+773.637200618 I0422 16:43:05.019965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:43:05.020021 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-22 16:43:05.020015285 +0000 UTC m=+773.654732538 I0422 16:43:05.185406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:43:05.214987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4gmnz" condition "Approved" to 2026-04-22 16:43:05.214973343 +0000 UTC m=+773.849690626 I0422 16:43:05.232883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4gmnz" condition "Ready" to 2026-04-22 16:43:05.232871332 +0000 UTC m=+773.867588585 I0422 16:43:05.263684 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:43:05.263664636 +0000 UTC m=+773.898381919 I0422 16:43:05.294073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:44:10.837964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:44:10.838027 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-22 16:44:10.838020623 +0000 UTC m=+839.472737876 I0422 16:44:10.838439 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-22 16:44:10.838434284 +0000 UTC m=+839.473151537 I0422 16:44:10.854560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:44:10.854657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:44:10.854687 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-22 16:44:10.854680499 +0000 UTC m=+839.489397772 I0422 16:44:11.005044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8fhrj" condition "Approved" to 2026-04-22 16:44:11.005034823 +0000 UTC m=+839.639752066 I0422 16:44:11.019890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8fhrj" condition "Ready" to 2026-04-22 16:44:11.019877969 +0000 UTC m=+839.654595232 I0422 16:44:11.055196 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:44:11.055185605 +0000 UTC m=+839.689902858 I0422 16:44:11.071753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:44:11.072230 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:44:11.072221062 +0000 UTC m=+839.706938335 I0422 16:44:11.085968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:44:11.099173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:44:11.099489 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:44:11.099480938 +0000 UTC m=+839.734198191 I0422 16:44:11.103981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:47:17.292440 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-22 16:47:17.292387596 +0000 UTC m=+1025.927104849 I0422 16:47:17.292517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:47:17.292571 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-22 16:47:17.292564641 +0000 UTC m=+1025.927281894 I0422 16:47:17.309383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:47:17.309511 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-22 16:47:17.309497904 +0000 UTC m=+1025.944215177 I0422 16:47:17.434035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:47:17.467929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zk5xq" condition "Approved" to 2026-04-22 16:47:17.467918589 +0000 UTC m=+1026.102635832 I0422 16:47:17.490156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zk5xq" condition "Ready" to 2026-04-22 16:47:17.490148188 +0000 UTC m=+1026.124865421 I0422 16:47:17.519519 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:47:17.519507851 +0000 UTC m=+1026.154225114 I0422 16:47:17.543101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:47:17.543553 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:47:17.543544979 +0000 UTC m=+1026.178262232 I0422 16:47:17.548640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:47:17.563482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:47:17.563799 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:47:17.563791773 +0000 UTC m=+1026.198509026