I0401 05:12:18.524337 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0401 05:12:18.524488 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0401 05:12:18.524586 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0401 05:12:18.528709 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0401 05:12:18.529131 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0401 05:12:18.529238 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0401 05:12:18.529508 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0401 05:12:18.531777 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0401 05:12:18.547612 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0401 05:12:18.553406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0401 05:12:18.557527 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0401 05:12:18.561351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0401 05:12:18.564040 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0401 05:12:18.566230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0401 05:12:18.568123 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0401 05:12:18.568273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0401 05:12:18.570156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0401 05:12:18.572092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0401 05:12:18.575679 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0401 05:12:18.581889 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0401 05:12:18.584579 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0401 05:12:18.584606 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0401 05:12:18.584709 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0401 05:12:18.587527 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0401 05:12:18.589961 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0401 05:12:18.592159 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0401 05:12:18.594419 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0401 05:12:18.594440 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0401 05:12:18.594509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0401 05:12:18.596234 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0401 05:12:18.596376 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0401 05:12:18.598150 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0401 05:12:18.599854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0401 05:12:18.606225 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.606344 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.606754 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.606980 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.622817 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.641890 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.678844 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.688365 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.703062 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:18.708943 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 05:12:29.638492 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-01 05:12:29.638466967 +0000 UTC m=+11.148755100 I0401 05:12:30.405108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:12:30.405217 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-01 05:12:30.405205766 +0000 UTC m=+11.915493899 I0401 05:12:30.405292 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 05:12:30.405268947 +0000 UTC m=+11.915557080 E0401 05:12:30.422547 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 05:12:30.422625 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-01 05:12:30.422614076 +0000 UTC m=+11.932902209 E0401 05:12:30.422662 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 05:12:30.427478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:12:30.427560 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 05:12:30.427550853 +0000 UTC m=+11.937838976 E0401 05:12:30.449449 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0401 05:12:30.450323 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 05:12:30.450430 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 05:12:30.450492 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0401 05:12:30.451361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:12:30.475686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g8dqf" condition "Approved" to 2026-04-01 05:12:30.475673128 +0000 UTC m=+11.985961231 I0401 05:12:30.491201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g8dqf" condition "Ready" to 2026-04-01 05:12:30.491187885 +0000 UTC m=+12.001475998 I0401 05:12:30.536490 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:12:30.536460093 +0000 UTC m=+12.046748226 I0401 05:12:30.562920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:12:35.450569 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:12:35.450552581 +0000 UTC m=+16.960840704 I0401 05:12:57.207628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:12:57.207741 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-01 05:12:57.207721456 +0000 UTC m=+38.718009559 I0401 05:12:57.207678 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-01 05:12:57.207667254 +0000 UTC m=+38.717955357 I0401 05:12:57.217496 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-01 05:12:57.217479265 +0000 UTC m=+38.727767368 I0401 05:12:57.230672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:12:57.230770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:12:57.232547 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-01 05:12:57.232536051 +0000 UTC m=+38.742824194 I0401 05:12:57.497117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:12:57.511643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gdq5p" condition "Approved" to 2026-04-01 05:12:57.511629934 +0000 UTC m=+39.021918037 I0401 05:12:57.560656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gdq5p" condition "Ready" to 2026-04-01 05:12:57.560638811 +0000 UTC m=+39.070926914 I0401 05:12:57.595393 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:12:57.59538015 +0000 UTC m=+39.105668253 I0401 05:12:57.615761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:12:57.616186 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:12:57.616177222 +0000 UTC m=+39.126465315 I0401 05:12:57.636102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:43.526293 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-01 05:14:43.526274071 +0000 UTC m=+145.036562204 I0401 05:14:43.526500 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:14:43.526590 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-01 05:14:43.526572768 +0000 UTC m=+145.036860891 E0401 05:14:43.547201 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 05:14:43.547281 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-01 05:14:43.54726967 +0000 UTC m=+145.057557773 I0401 05:14:43.547342 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 05:14:43.548553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:43.548641 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-01 05:14:43.548629942 +0000 UTC m=+145.058918045 E0401 05:14:43.564559 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0401 05:14:43.564811 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 05:14:43.564858 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0401 05:14:43.564906 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0401 05:14:43.565357 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-01 05:14:43.565340938 +0000 UTC m=+145.075629041 I0401 05:14:43.565410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:14:43.565444 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-01 05:14:43.565434091 +0000 UTC m=+145.075722194 I0401 05:14:43.583147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:43.583238 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-01 05:14:43.583228012 +0000 UTC m=+145.093516105 I0401 05:14:43.704896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:43.730572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jw7cm" condition "Approved" to 2026-04-01 05:14:43.730559619 +0000 UTC m=+145.240847732 I0401 05:14:43.764200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jw7cm" condition "Ready" to 2026-04-01 05:14:43.764187847 +0000 UTC m=+145.274475950 I0401 05:14:43.796155 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:14:43.796140125 +0000 UTC m=+145.306428228 I0401 05:14:43.817372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:43.817777 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:14:43.817769659 +0000 UTC m=+145.328057762 I0401 05:14:43.823763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:43.834884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:43.924576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:43.956002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-b6mkt" condition "Approved" to 2026-04-01 05:14:43.955985588 +0000 UTC m=+145.466273691 I0401 05:14:43.970869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-b6mkt" condition "Ready" to 2026-04-01 05:14:43.970857591 +0000 UTC m=+145.481145684 I0401 05:14:48.566038 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:14:48.566023005 +0000 UTC m=+150.076311138 I0401 05:14:48.634281 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-b6mkt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:14:48.634268755 +0000 UTC m=+150.144556858 I0401 05:14:48.663761 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:14:48.663723384 +0000 UTC m=+150.174011517 I0401 05:14:48.684513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:48.684843 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:14:48.684835404 +0000 UTC m=+150.195123508 I0401 05:14:48.692853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:14:48.704847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:17:21.551334 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready" to 2026-04-01 05:17:21.551315778 +0000 UTC m=+303.061603881 I0401 05:17:21.551396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:17:21.551440 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Issuing" to 2026-04-01 05:17:21.551428241 +0000 UTC m=+303.061716374 I0401 05:17:21.567183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:17:21.567261 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready" to 2026-04-01 05:17:21.567252054 +0000 UTC m=+303.077540157 I0401 05:17:21.726115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:17:21.758126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-141.nip.io-tls-v47mm" condition "Approved" to 2026-04-01 05:17:21.758064002 +0000 UTC m=+303.268352125 I0401 05:17:21.779068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-141.nip.io-tls-v47mm" condition "Ready" to 2026-04-01 05:17:21.779047548 +0000 UTC m=+303.289335681 I0401 05:17:21.809214 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:17:21.809192392 +0000 UTC m=+303.319480525 I0401 05:17:21.831744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:18:31.147557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:18:31.147687 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-01 05:18:31.147672421 +0000 UTC m=+372.657960544 I0401 05:18:31.147601 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-01 05:18:31.147581149 +0000 UTC m=+372.657869252 I0401 05:18:31.162638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:18:31.162756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:18:31.162789 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-01 05:18:31.162778681 +0000 UTC m=+372.673066804 E0401 05:18:31.163453 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 05:18:31.163514 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-01 05:18:31.163502348 +0000 UTC m=+372.673790451 E0401 05:18:31.163580 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 05:18:31.174185 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0401 05:18:31.174430 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 05:18:31.174528 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 05:18:31.174648 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0401 05:18:31.206121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-f98xt" condition "Approved" to 2026-04-01 05:18:31.206074248 +0000 UTC m=+372.716362351 I0401 05:18:31.217488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-f98xt" condition "Ready" to 2026-04-01 05:18:31.217474439 +0000 UTC m=+372.727762542 I0401 05:18:31.242202 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:18:31.242185806 +0000 UTC m=+372.752473909 I0401 05:18:31.259801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:18:31.260131 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:18:31.260118532 +0000 UTC m=+372.770406665 I0401 05:18:31.273486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:18:31.279625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:18:36.174876 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:18:36.174862654 +0000 UTC m=+377.685150747 I0401 05:19:16.889328 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-01 05:19:16.889306921 +0000 UTC m=+418.399595044 I0401 05:19:16.889981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:19:16.890017 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 05:19:16.890011777 +0000 UTC m=+418.400299890 I0401 05:19:16.898486 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-01 05:19:16.898463278 +0000 UTC m=+418.408751411 I0401 05:19:16.899062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:19:16.899101 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 05:19:16.899093993 +0000 UTC m=+418.409382116 I0401 05:19:16.899138 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-01 05:19:16.899116134 +0000 UTC m=+418.409404237 I0401 05:19:16.899336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:19:16.899389 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-01 05:19:16.89937604 +0000 UTC m=+418.409664153 I0401 05:19:16.936195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:16.937847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:19:16.937880 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-01 05:19:16.937873957 +0000 UTC m=+418.448162040 I0401 05:19:16.938037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:16.939973 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-01 05:19:16.939952697 +0000 UTC m=+418.450240800 I0401 05:19:16.942814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:16.942921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:19:16.942969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 05:19:16.942958738 +0000 UTC m=+418.453246851 I0401 05:19:17.287909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:17.295597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4xpcv" condition "Approved" to 2026-04-01 05:19:17.295563205 +0000 UTC m=+418.805851328 I0401 05:19:17.321215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4xpcv" condition "Ready" to 2026-04-01 05:19:17.321200865 +0000 UTC m=+418.831488958 I0401 05:19:17.360092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:17.361077 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:17.361064374 +0000 UTC m=+418.871352477 I0401 05:19:17.371942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qxpr8" condition "Approved" to 2026-04-01 05:19:17.371917623 +0000 UTC m=+418.882205726 I0401 05:19:17.389905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:17.392212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qxpr8" condition "Ready" to 2026-04-01 05:19:17.392192925 +0000 UTC m=+418.902481018 I0401 05:19:17.399211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:17.425103 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:17.425085529 +0000 UTC m=+418.935373632 I0401 05:19:17.450266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:17.450678 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:17.450666728 +0000 UTC m=+418.960954831 I0401 05:19:17.681512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:17.730562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:18.035464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ndmch" condition "Approved" to 2026-04-01 05:19:18.035439323 +0000 UTC m=+419.545727456 I0401 05:19:18.193041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ndmch" condition "Ready" to 2026-04-01 05:19:18.193026066 +0000 UTC m=+419.703314169 I0401 05:19:18.628740 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-ndmch" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-ddhk5" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0401 05:19:18.785960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c5cxn" condition "Approved" to 2026-04-01 05:19:18.785938485 +0000 UTC m=+420.296226608 I0401 05:19:19.049997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c5cxn" condition "Ready" to 2026-04-01 05:19:19.049978662 +0000 UTC m=+420.560266765 I0401 05:19:19.431874 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:19.431851285 +0000 UTC m=+420.942139418 I0401 05:19:19.531668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:19.532161 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:19.532144644 +0000 UTC m=+421.042432767 I0401 05:19:19.731220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:25.649089 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" condition "Ready" to 2026-04-01 05:19:25.649066525 +0000 UTC m=+427.159354648 I0401 05:19:25.649244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:19:25.649311 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" condition "Issuing" to 2026-04-01 05:19:25.649296341 +0000 UTC m=+427.159584484 I0401 05:19:25.667446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:25.667550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:19:25.667569 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" condition "Issuing" to 2026-04-01 05:19:25.667563506 +0000 UTC m=+427.177851599 I0401 05:19:26.173430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ls7w5-np8xm" condition "Approved" to 2026-04-01 05:19:26.173409972 +0000 UTC m=+427.683698075 I0401 05:19:26.183502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:26.195360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ls7w5-np8xm" condition "Ready" to 2026-04-01 05:19:26.195349964 +0000 UTC m=+427.705638047 I0401 05:19:26.229450 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:26.229430456 +0000 UTC m=+427.739718579 I0401 05:19:26.248645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ls7w5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:52.937359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:19:52.938251 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-01 05:19:52.938240027 +0000 UTC m=+454.448528120 I0401 05:19:52.937963 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-01 05:19:52.93794052 +0000 UTC m=+454.448228613 I0401 05:19:52.956078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:52.956211 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-01 05:19:52.956201974 +0000 UTC m=+454.466490067 I0401 05:19:53.385449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:53.420570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5kw5m" condition "Approved" to 2026-04-01 05:19:53.420558958 +0000 UTC m=+454.930847061 I0401 05:19:53.449514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5kw5m" condition "Ready" to 2026-04-01 05:19:53.449490326 +0000 UTC m=+454.959778449 I0401 05:19:53.484678 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:53.484661251 +0000 UTC m=+454.994949384 I0401 05:19:53.506257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:53.506557 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:53.506549312 +0000 UTC m=+455.016837405 I0401 05:19:53.521929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:19:53.522645 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:19:53.522631914 +0000 UTC m=+455.032920047 I0401 05:23:11.432070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:23:11.432199 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 05:23:11.432184399 +0000 UTC m=+652.942472522 I0401 05:23:11.432151 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-01 05:23:11.432125038 +0000 UTC m=+652.942413171 I0401 05:23:11.451724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:23:11.451841 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-01 05:23:11.451828766 +0000 UTC m=+652.962116949 I0401 05:23:11.642507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:23:11.680494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v77ll" condition "Approved" to 2026-04-01 05:23:11.680476798 +0000 UTC m=+653.190764901 I0401 05:23:11.699305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v77ll" condition "Ready" to 2026-04-01 05:23:11.699288994 +0000 UTC m=+653.209577087 I0401 05:23:11.729109 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:23:11.729090313 +0000 UTC m=+653.239378416 I0401 05:23:11.753209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:23:11.803766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:25:44.869029 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:25:44.869106 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-01 05:25:44.869097093 +0000 UTC m=+806.379385206 I0401 05:25:44.869538 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-01 05:25:44.869508583 +0000 UTC m=+806.379796706 I0401 05:25:44.892401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:25:44.892618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:25:44.892661 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-01 05:25:44.892651863 +0000 UTC m=+806.402939996 I0401 05:25:45.125382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7tx7f" condition "Approved" to 2026-04-01 05:25:45.125365146 +0000 UTC m=+806.635653239 I0401 05:25:45.149264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7tx7f" condition "Ready" to 2026-04-01 05:25:45.149240724 +0000 UTC m=+806.659528827 I0401 05:25:45.185502 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:25:45.185437945 +0000 UTC m=+806.695726078 I0401 05:25:45.221037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:25:45.223053 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:25:45.223031348 +0000 UTC m=+806.733319441 I0401 05:25:45.242114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:25:45.243543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:25:45.244932 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:25:45.244890418 +0000 UTC m=+806.755178521 I0401 05:25:45.248823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:26:53.241476 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-01 05:26:53.241456921 +0000 UTC m=+874.751745034 I0401 05:26:53.241599 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:26:53.241672 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-01 05:26:53.241663015 +0000 UTC m=+874.751951118 I0401 05:26:53.260589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:26:53.260694 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-01 05:26:53.260683317 +0000 UTC m=+874.770971430 I0401 05:26:53.540893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:26:53.573555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-nk48k" condition "Approved" to 2026-04-01 05:26:53.573540526 +0000 UTC m=+875.083828619 I0401 05:26:53.594965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-nk48k" condition "Ready" to 2026-04-01 05:26:53.594953046 +0000 UTC m=+875.105241149 I0401 05:26:53.631111 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:26:53.631094005 +0000 UTC m=+875.141382098 I0401 05:26:53.658677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:26:53.659061 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:26:53.65905496 +0000 UTC m=+875.169343053 I0401 05:26:53.676821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:26:53.677100 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:26:53.677093068 +0000 UTC m=+875.187381161 I0401 05:29:59.572565 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-01 05:29:59.572544421 +0000 UTC m=+1061.082832544 I0401 05:29:59.572666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 05:29:59.572695 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-01 05:29:59.572687654 +0000 UTC m=+1061.082975757 I0401 05:29:59.593667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:29:59.593778 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-01 05:29:59.593767803 +0000 UTC m=+1061.104055906 I0401 05:29:59.924273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:29:59.955069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pcnxh" condition "Approved" to 2026-04-01 05:29:59.955052838 +0000 UTC m=+1061.465340931 I0401 05:29:59.976654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pcnxh" condition "Ready" to 2026-04-01 05:29:59.9766258 +0000 UTC m=+1061.486913943 I0401 05:30:00.005101 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:30:00.005085414 +0000 UTC m=+1061.515373507 I0401 05:30:00.026871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:30:00.027268 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:30:00.02726029 +0000 UTC m=+1061.537548393 I0401 05:30:00.047686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:30:00.047876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 05:30:00.048197 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 05:30:00.048188057 +0000 UTC m=+1061.558476160