I0401 23:28:49.768588 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0401 23:28:49.768708 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0401 23:28:49.768843 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0401 23:28:49.777283 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0401 23:28:49.777801 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0401 23:28:49.777865 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0401 23:28:49.777912 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0401 23:28:49.781082 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0401 23:28:49.801965 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0401 23:28:49.805478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0401 23:28:49.808444 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0401 23:28:49.813645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0401 23:28:49.818503 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0401 23:28:49.818546 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0401 23:28:49.818549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0401 23:28:49.822064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0401 23:28:49.824312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0401 23:28:49.826274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0401 23:28:49.828309 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0401 23:28:49.828600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0401 23:28:49.830684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0401 23:28:49.834950 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0401 23:28:49.840984 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0401 23:28:49.843727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0401 23:28:49.846075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0401 23:28:49.848076 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0401 23:28:49.848107 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0401 23:28:49.848134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0401 23:28:49.850403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0401 23:28:49.852454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0401 23:28:49.854328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0401 23:28:49.856099 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0401 23:28:49.857392 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0401 23:28:49.861474 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.862047 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.862636 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.863406 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.877374 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.927382 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.940005 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.966213 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.982282 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:49.992057 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:00.850517 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-01 23:29:00.8504954 +0000 UTC m=+11.113843102 I0401 23:29:01.562788 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 23:29:01.562773331 +0000 UTC m=+11.826120993 I0401 23:29:01.562901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:29:01.562961 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-01 23:29:01.562951864 +0000 UTC m=+11.826299546 E0401 23:29:01.574731 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:29:01.574780 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-01 23:29:01.574774878 +0000 UTC m=+11.838122540 E0401 23:29:01.574801 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:29:01.577603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:01.577666 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 23:29:01.577660545 +0000 UTC m=+11.841008207 E0401 23:29:01.585347 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0401 23:29:01.585556 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:29:01.585656 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:29:01.585735 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0401 23:29:01.597706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:01.620761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tfnwt" condition "Approved" to 2026-04-01 23:29:01.620740537 +0000 UTC m=+11.884088229 I0401 23:29:01.639275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tfnwt" condition "Ready" to 2026-04-01 23:29:01.639259434 +0000 UTC m=+11.902607106 I0401 23:29:01.666048 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:29:01.666030112 +0000 UTC m=+11.929377794 I0401 23:29:01.685870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:06.586162 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:29:06.586147649 +0000 UTC m=+16.849495331 I0401 23:29:25.478766 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-01 23:29:25.478749284 +0000 UTC m=+35.742096946 I0401 23:29:25.479219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:29:25.479280 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-01 23:29:25.479267264 +0000 UTC m=+35.742614956 I0401 23:29:25.497469 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-01 23:29:25.497456767 +0000 UTC m=+35.760804429 I0401 23:29:25.505799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:25.505889 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-01 23:29:25.505881157 +0000 UTC m=+35.769228819 I0401 23:29:25.615574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:25.648715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-28cvn" condition "Approved" to 2026-04-01 23:29:25.648703291 +0000 UTC m=+35.912050953 I0401 23:29:25.681973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-28cvn" condition "Ready" to 2026-04-01 23:29:25.681959435 +0000 UTC m=+35.945307097 I0401 23:29:25.712106 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:29:25.712091348 +0000 UTC m=+35.975439010 I0401 23:29:25.735432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:07.545044 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-01 23:31:07.545019671 +0000 UTC m=+137.808367323 I0401 23:31:07.545161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:31:07.545260 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-01 23:31:07.545249386 +0000 UTC m=+137.808597068 E0401 23:31:07.563489 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:31:07.563602 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-01 23:31:07.563588754 +0000 UTC m=+137.826936436 I0401 23:31:07.563635 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:31:07.565844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:07.566015 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:31:07.566063 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-01 23:31:07.566052883 +0000 UTC m=+137.829400565 E0401 23:31:07.572970 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0401 23:31:07.573295 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:31:07.573339 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0401 23:31:07.573383 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0401 23:31:07.578921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:31:07.578955 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-01 23:31:07.578945601 +0000 UTC m=+137.842293263 I0401 23:31:07.578974 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-01 23:31:07.578961901 +0000 UTC m=+137.842309563 I0401 23:31:07.594998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:07.595067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:31:07.595091 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-01 23:31:07.595086074 +0000 UTC m=+137.858433726 I0401 23:31:07.784885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:07.792316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-lltxf" condition "Approved" to 2026-04-01 23:31:07.792297584 +0000 UTC m=+138.055645246 I0401 23:31:07.802317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2kbj9" condition "Approved" to 2026-04-01 23:31:07.802302764 +0000 UTC m=+138.065650436 I0401 23:31:07.811083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-lltxf" condition "Ready" to 2026-04-01 23:31:07.811070959 +0000 UTC m=+138.074418611 I0401 23:31:07.829303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2kbj9" condition "Ready" to 2026-04-01 23:31:07.829282245 +0000 UTC m=+138.092629937 I0401 23:31:07.856464 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:31:07.856448178 +0000 UTC m=+138.119795840 I0401 23:31:07.878693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:07.878984 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:31:07.87897655 +0000 UTC m=+138.142324202 I0401 23:31:07.885248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:07.895332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:07.895720 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:31:07.895706124 +0000 UTC m=+138.159053786 I0401 23:31:12.574033 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:31:12.574022897 +0000 UTC m=+142.837370559 I0401 23:31:12.593293 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-lltxf" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:31:12.593277543 +0000 UTC m=+142.856625235 I0401 23:31:12.634151 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:31:12.634126021 +0000 UTC m=+142.897473683 I0401 23:31:12.654233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:12.654534 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:31:12.65452738 +0000 UTC m=+142.917875042 I0401 23:31:12.670745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:12.671290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:31:12.671653 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:31:12.671641912 +0000 UTC m=+142.934989594 I0401 23:33:39.812885 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready" to 2026-04-01 23:33:39.812863007 +0000 UTC m=+290.076210689 I0401 23:33:39.813151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:33:39.813268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-04-01 23:33:39.813258275 +0000 UTC m=+290.076605937 I0401 23:33:39.834852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:33:39.834927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:33:39.835046 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-04-01 23:33:39.83494025 +0000 UTC m=+290.098287912 I0401 23:33:39.991380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-zvv65" condition "Approved" to 2026-04-01 23:33:39.991361665 +0000 UTC m=+290.254709327 I0401 23:33:40.010977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-zvv65" condition "Ready" to 2026-04-01 23:33:40.010960497 +0000 UTC m=+290.274308179 I0401 23:33:40.040569 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:33:40.04055457 +0000 UTC m=+290.303902232 I0401 23:33:40.069021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:33:40.069347 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:33:40.069337437 +0000 UTC m=+290.332685099 I0401 23:33:40.086090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:33:40.086329 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:33:40.086323578 +0000 UTC m=+290.349671240 I0401 23:33:40.089313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:51.933901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:34:51.933960 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-01 23:34:51.933947749 +0000 UTC m=+362.197295431 I0401 23:34:51.933971 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-01 23:34:51.933944959 +0000 UTC m=+362.197292641 I0401 23:34:51.947260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:51.947330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:34:51.947354 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-01 23:34:51.947346417 +0000 UTC m=+362.210694079 E0401 23:34:51.947568 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:34:51.947615 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-01 23:34:51.947608882 +0000 UTC m=+362.210956544 E0401 23:34:51.947675 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:34:51.958340 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0401 23:34:51.958755 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:34:51.958811 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:34:51.958867 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0401 23:34:51.984165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:51.988318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j2lf9" condition "Approved" to 2026-04-01 23:34:51.988303838 +0000 UTC m=+362.251651500 I0401 23:34:52.001891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j2lf9" condition "Ready" to 2026-04-01 23:34:52.00188027 +0000 UTC m=+362.265227932 I0401 23:34:52.024424 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:34:52.024404351 +0000 UTC m=+362.287752043 I0401 23:34:52.042524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:52.042904 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:34:52.042889762 +0000 UTC m=+362.306237454 I0401 23:34:52.056214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:52.058042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:56.960977 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:34:56.960955866 +0000 UTC m=+367.224303548 I0401 23:35:38.160512 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-01 23:35:38.160499744 +0000 UTC m=+408.423847406 I0401 23:35:38.161163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:38.161261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:38.161230 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 23:35:38.161216848 +0000 UTC m=+408.424564530 I0401 23:35:38.161301 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 23:35:38.161291279 +0000 UTC m=+408.424638931 I0401 23:35:38.161378 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-01 23:35:38.161372501 +0000 UTC m=+408.424720163 I0401 23:35:38.161457 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-01 23:35:38.161454282 +0000 UTC m=+408.424801944 I0401 23:35:38.161467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:38.161528 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-01 23:35:38.161519594 +0000 UTC m=+408.424867256 I0401 23:35:38.193777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:38.193866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:38.193895 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 23:35:38.193887178 +0000 UTC m=+408.457234840 I0401 23:35:38.200625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:38.200741 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-01 23:35:38.200726825 +0000 UTC m=+408.464074487 I0401 23:35:38.201266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:38.203507 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-01 23:35:38.20349055 +0000 UTC m=+408.466838202 I0401 23:35:38.417729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:38.457388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7255j" condition "Approved" to 2026-04-01 23:35:38.457368137 +0000 UTC m=+408.720715799 I0401 23:35:38.485157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7255j" condition "Ready" to 2026-04-01 23:35:38.48513793 +0000 UTC m=+408.748485582 I0401 23:35:38.499734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:38.524154 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:38.524142127 +0000 UTC m=+408.787489779 I0401 23:35:38.533805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vgnqn" condition "Approved" to 2026-04-01 23:35:38.533784279 +0000 UTC m=+408.797131951 I0401 23:35:38.546468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:38.546830 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:38.546820408 +0000 UTC m=+408.810168060 I0401 23:35:38.550763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vgnqn" condition "Ready" to 2026-04-01 23:35:38.550748657 +0000 UTC m=+408.814096309 I0401 23:35:38.569526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:38.584574 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:38.584556251 +0000 UTC m=+408.847903903 I0401 23:35:38.699163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:38.699854 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:38.699839037 +0000 UTC m=+408.963186739 E0401 23:35:38.746573 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-cnzmd\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0401 23:35:39.100104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:39.205001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xpp8z" condition "Approved" to 2026-04-01 23:35:39.204983329 +0000 UTC m=+409.468330991 I0401 23:35:39.566633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xpp8z" condition "Ready" to 2026-04-01 23:35:39.566608783 +0000 UTC m=+409.829956435 I0401 23:35:39.808450 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-xpp8z" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-ll49z" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0401 23:35:40.003841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vtkbk" condition "Approved" to 2026-04-01 23:35:40.003821753 +0000 UTC m=+410.267169415 I0401 23:35:40.307756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vtkbk" condition "Ready" to 2026-04-01 23:35:40.307737326 +0000 UTC m=+410.571085008 I0401 23:35:40.549867 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:40.549824498 +0000 UTC m=+410.813172180 I0401 23:35:40.649914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:40.650561 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:40.650550134 +0000 UTC m=+410.913897816 I0401 23:35:40.848492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:46.042478 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" condition "Ready" to 2026-04-01 23:35:46.042464642 +0000 UTC m=+416.305812304 I0401 23:35:46.042550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:46.042609 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" condition "Issuing" to 2026-04-01 23:35:46.042592964 +0000 UTC m=+416.305940656 I0401 23:35:46.059600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:46.059737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:46.059784 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" condition "Issuing" to 2026-04-01 23:35:46.059775236 +0000 UTC m=+416.323122898 I0401 23:35:46.247815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:46.253338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lhkhs-h8j2q" condition "Approved" to 2026-04-01 23:35:46.253324362 +0000 UTC m=+416.516672024 I0401 23:35:46.276995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lhkhs-h8j2q" condition "Ready" to 2026-04-01 23:35:46.276976494 +0000 UTC m=+416.540324186 I0401 23:35:46.313455 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:46.31343644 +0000 UTC m=+416.576784122 I0401 23:35:46.333702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:46.334121 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:46.334110401 +0000 UTC m=+416.597458063 I0401 23:35:46.341738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:46.353162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhkhs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:15.013630 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-01 23:36:15.013607687 +0000 UTC m=+445.276955379 I0401 23:36:15.013689 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:15.013726 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-01 23:36:15.013716369 +0000 UTC m=+445.277064031 I0401 23:36:15.029247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:15.029367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:15.029399 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-01 23:36:15.029387881 +0000 UTC m=+445.292735573 I0401 23:36:15.199370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9wvbp" condition "Approved" to 2026-04-01 23:36:15.199351486 +0000 UTC m=+445.462699178 I0401 23:36:15.232624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9wvbp" condition "Ready" to 2026-04-01 23:36:15.232609069 +0000 UTC m=+445.495956721 I0401 23:36:15.264080 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:15.264065505 +0000 UTC m=+445.527413167 I0401 23:36:15.287184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:15.287646 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:15.287631905 +0000 UTC m=+445.550979567 I0401 23:36:15.335080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:39:27.869089 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-01 23:39:27.869069779 +0000 UTC m=+638.132417461 I0401 23:39:27.869296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:39:27.869490 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 23:39:27.869445277 +0000 UTC m=+638.132792959 I0401 23:39:27.884531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:39:27.884642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:39:27.884670 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 23:39:27.884663189 +0000 UTC m=+638.148010851 I0401 23:39:28.074100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:39:28.085256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w6qbz" condition "Approved" to 2026-04-01 23:39:28.085241318 +0000 UTC m=+638.348588980 I0401 23:39:28.101982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w6qbz" condition "Ready" to 2026-04-01 23:39:28.101966939 +0000 UTC m=+638.365314601 I0401 23:39:28.131729 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:39:28.131705689 +0000 UTC m=+638.395053341 I0401 23:39:28.151766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:39:28.152207 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:39:28.152198185 +0000 UTC m=+638.415545847 I0401 23:39:28.178265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:39:28.178587 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:39:28.178575889 +0000 UTC m=+638.441923551 I0401 23:41:53.829785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:41:53.829875 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-01 23:41:53.829862226 +0000 UTC m=+784.093209908 I0401 23:41:53.830673 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-01 23:41:53.830663662 +0000 UTC m=+784.094011344 I0401 23:41:53.845209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:41:53.845256 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-01 23:41:53.845252051 +0000 UTC m=+784.108599713 I0401 23:41:54.135072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:41:54.168573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-b5shx" condition "Approved" to 2026-04-01 23:41:54.168560653 +0000 UTC m=+784.431908325 I0401 23:41:54.186971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-b5shx" condition "Ready" to 2026-04-01 23:41:54.186957637 +0000 UTC m=+784.450305299 I0401 23:41:54.219193 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:41:54.219179847 +0000 UTC m=+784.482527499 I0401 23:41:54.254667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:41:54.254939 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:41:54.254933196 +0000 UTC m=+784.518280838 I0401 23:41:54.273787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:55.905826 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-01 23:42:55.9057976 +0000 UTC m=+846.169145292 I0401 23:42:55.905865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:42:55.906064 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-01 23:42:55.906052425 +0000 UTC m=+846.169400087 I0401 23:42:55.922612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:55.922713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:42:55.922745 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-01 23:42:55.922734625 +0000 UTC m=+846.186082297 I0401 23:42:56.057169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:56.061551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-m5dpn" condition "Approved" to 2026-04-01 23:42:56.061529288 +0000 UTC m=+846.324876950 I0401 23:42:56.091229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-m5dpn" condition "Ready" to 2026-04-01 23:42:56.091210716 +0000 UTC m=+846.354558408 I0401 23:42:56.126510 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:42:56.126494927 +0000 UTC m=+846.389842589 I0401 23:42:56.158519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:56.505295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:45:56.505366 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-01 23:45:56.505357524 +0000 UTC m=+1026.768705186 I0401 23:45:56.505485 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-01 23:45:56.505453915 +0000 UTC m=+1026.768801637 I0401 23:45:56.523824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:56.523938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:45:56.523966 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-01 23:45:56.523957162 +0000 UTC m=+1026.787304824 I0401 23:45:56.904462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:56.916798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pp2s5" condition "Approved" to 2026-04-01 23:45:56.916784106 +0000 UTC m=+1027.180131758 I0401 23:45:56.943173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pp2s5" condition "Ready" to 2026-04-01 23:45:56.943159068 +0000 UTC m=+1027.206506730 I0401 23:45:56.979895 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:45:56.979877435 +0000 UTC m=+1027.243225097 I0401 23:45:57.002422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:57.002901 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:45:57.002893511 +0000 UTC m=+1027.266241173 I0401 23:45:57.025997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:57.026738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:57.027308 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:45:57.027291094 +0000 UTC m=+1027.290638786