I0420 11:54:53.130464 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 11:54:53.130723 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 11:54:53.130890 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 11:54:53.136196 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 11:54:53.136943 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 11:54:53.137081 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 11:54:53.137082 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 11:54:53.140437 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 11:54:53.154436 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 11:54:53.161879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 11:54:53.166864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 11:54:53.170766 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 11:54:53.170805 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 11:54:53.170807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 11:54:53.174199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 11:54:53.176397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 11:54:53.178039 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 11:54:53.179792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 11:54:53.185402 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 11:54:53.185526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 11:54:53.189486 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 11:54:53.193210 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 11:54:53.193247 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 11:54:53.193257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 11:54:53.193258 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 11:54:53.195398 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 11:54:53.197288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 11:54:53.199080 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 11:54:53.200963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 11:54:53.202681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 11:54:53.209063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 11:54:53.213160 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 11:54:53.215460 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 11:54:53.217512 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.217822 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.219346 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.255002 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.278195 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.292666 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.306439 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.327773 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.338032 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:54:53.345231 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:55:06.541944 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 11:55:06.541922757 +0000 UTC m=+13.446440203 I0420 11:55:07.244724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:55:07.244865 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 11:55:07.244852036 +0000 UTC m=+14.149369492 I0420 11:55:07.244809 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 11:55:07.244774624 +0000 UTC m=+14.149292060 E0420 11:55:07.260535 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 11:55:07.260625 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 11:55:07.260616114 +0000 UTC m=+14.165133550 E0420 11:55:07.260650 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 11:55:07.264379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:55:07.264447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:55:07.264468 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 11:55:07.264463046 +0000 UTC m=+14.168980482 E0420 11:55:07.271741 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 11:55:07.271845 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 11:55:07.271881 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 11:55:07.271916 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 11:55:07.307744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kx9c4" condition "Approved" to 2026-04-20 11:55:07.307727555 +0000 UTC m=+14.212244991 I0420 11:55:07.321812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kx9c4" condition "Ready" to 2026-04-20 11:55:07.321799133 +0000 UTC m=+14.226316589 I0420 11:55:07.346145 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:55:07.346131387 +0000 UTC m=+14.250648823 I0420 11:55:07.365092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:55:12.272434 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:55:12.272419757 +0000 UTC m=+19.176937223 I0420 11:55:33.201925 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 11:55:33.201904973 +0000 UTC m=+40.106422439 I0420 11:55:33.202725 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:55:33.202779 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 11:55:33.202770063 +0000 UTC m=+40.107287489 I0420 11:55:33.212524 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 11:55:33.212504677 +0000 UTC m=+40.117022103 I0420 11:55:33.227361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:55:33.227483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:55:33.227515 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 11:55:33.227505759 +0000 UTC m=+40.132023185 I0420 11:55:33.335175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-h2txp" condition "Approved" to 2026-04-20 11:55:33.335152038 +0000 UTC m=+40.239669494 I0420 11:55:33.369272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-h2txp" condition "Ready" to 2026-04-20 11:55:33.369255988 +0000 UTC m=+40.273773424 I0420 11:55:33.404202 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:55:33.404184719 +0000 UTC m=+40.308702155 I0420 11:55:33.426096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:55:33.426536 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:55:33.426529527 +0000 UTC m=+40.331046953 I0420 11:55:33.434552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:55:33.445025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:55:33.445433 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:55:33.445422471 +0000 UTC m=+40.349939907 I0420 11:57:05.928746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:57:05.928773 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 11:57:05.92874494 +0000 UTC m=+132.833262396 I0420 11:57:05.928833 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 11:57:05.928814652 +0000 UTC m=+132.833332118 I0420 11:57:05.943220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:57:05.943401 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:57:05.943432 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 11:57:05.943424683 +0000 UTC m=+132.847942119 E0420 11:57:05.943968 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 11:57:05.944023 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 11:57:05.944015678 +0000 UTC m=+132.848533114 I0420 11:57:05.944065 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 11:57:05.958804 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 11:57:05.958901 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 11:57:05.958935 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 11:57:05.959001 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 11:57:05.959087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:57:05.959139 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 11:57:05.95912856 +0000 UTC m=+132.863646026 I0420 11:57:05.959144 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 11:57:05.95911317 +0000 UTC m=+132.863630636 I0420 11:57:05.977548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:57:05.977674 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 11:57:05.977663535 +0000 UTC m=+132.882180961 I0420 11:57:06.319647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:57:06.323743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:57:06.324708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r8vb7" condition "Approved" to 2026-04-20 11:57:06.324693329 +0000 UTC m=+133.229210755 I0420 11:57:06.356654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-srtpx" condition "Approved" to 2026-04-20 11:57:06.356629986 +0000 UTC m=+133.261147442 I0420 11:57:06.360890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r8vb7" condition "Ready" to 2026-04-20 11:57:06.360871407 +0000 UTC m=+133.265388863 I0420 11:57:06.374338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-srtpx" condition "Ready" to 2026-04-20 11:57:06.374323921 +0000 UTC m=+133.278841367 I0420 11:57:06.390560 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:57:06.390546941 +0000 UTC m=+133.295064377 I0420 11:57:06.415823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:57:06.419399 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:57:06.419375293 +0000 UTC m=+133.323892759 I0420 11:57:06.431968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:57:06.432425 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:57:06.432417016 +0000 UTC m=+133.336934462 I0420 11:57:10.960188 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:57:10.960168799 +0000 UTC m=+137.864686225 I0420 11:57:10.975086 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-srtpx" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:57:10.975077048 +0000 UTC m=+137.879594474 I0420 11:57:11.007408 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:57:11.007395344 +0000 UTC m=+137.911912770 I0420 11:57:11.044599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:57:11.044883 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:57:11.044878013 +0000 UTC m=+137.949395439 I0420 11:57:11.071748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:59:43.607669 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready" to 2026-04-20 11:59:43.607653729 +0000 UTC m=+290.512171165 I0420 11:59:43.607905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:59:43.607944 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Issuing" to 2026-04-20 11:59:43.607936606 +0000 UTC m=+290.512454042 I0420 11:59:43.627389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:59:43.627451 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready" to 2026-04-20 11:59:43.627443614 +0000 UTC m=+290.531961050 I0420 11:59:43.953884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:59:43.983956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-141.nip.io-tls-nchtv" condition "Approved" to 2026-04-20 11:59:43.983941048 +0000 UTC m=+290.888458504 I0420 11:59:44.006993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-141.nip.io-tls-nchtv" condition "Ready" to 2026-04-20 11:59:44.006978531 +0000 UTC m=+290.911495997 I0420 11:59:44.038449 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:59:44.038428007 +0000 UTC m=+290.942945473 I0420 11:59:44.071558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:59:44.071895 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:59:44.07188817 +0000 UTC m=+290.976405606 I0420 11:59:44.085302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:59:44.085585 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:59:44.085578369 +0000 UTC m=+290.990095795 I0420 12:00:54.019153 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 12:00:54.019130523 +0000 UTC m=+360.923647989 I0420 12:00:54.019545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:00:54.019592 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 12:00:54.019581443 +0000 UTC m=+360.924098899 E0420 12:00:54.033007 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 12:00:54.033044 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 12:00:54.033038287 +0000 UTC m=+360.937555703 E0420 12:00:54.033083 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 12:00:54.035690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:00:54.035798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:00:54.036013 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 12:00:54.036007138 +0000 UTC m=+360.940524564 E0420 12:00:54.042762 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 12:00:54.042832 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 12:00:54.042859 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 12:00:54.042891 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 12:00:54.075186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sglcv" condition "Approved" to 2026-04-20 12:00:54.075163169 +0000 UTC m=+360.979680625 I0420 12:00:54.088319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sglcv" condition "Ready" to 2026-04-20 12:00:54.088307815 +0000 UTC m=+360.992825271 I0420 12:00:54.109518 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:00:54.109496733 +0000 UTC m=+361.014014169 I0420 12:00:54.126206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:00:59.043986 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:00:59.04397466 +0000 UTC m=+365.948492096 I0420 12:01:36.634636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 12:01:36.634613271 +0000 UTC m=+403.539130707 I0420 12:01:36.635565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:01:36.635631 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 12:01:36.635619065 +0000 UTC m=+403.540136501 I0420 12:01:36.655143 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 12:01:36.655109964 +0000 UTC m=+403.559627400 I0420 12:01:36.655358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:01:36.655398 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 12:01:36.65538954 +0000 UTC m=+403.559906976 I0420 12:01:36.655853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:01:36.655881 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 12:01:36.655876692 +0000 UTC m=+403.560394128 I0420 12:01:36.655886 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 12:01:36.655880312 +0000 UTC m=+403.560397748 I0420 12:01:36.666399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:36.666503 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 12:01:36.666492207 +0000 UTC m=+403.571009633 I0420 12:01:36.682856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:36.682885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:36.683257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:01:36.683279 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 12:01:36.68327415 +0000 UTC m=+403.587791576 I0420 12:01:36.686380 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 12:01:36.682962143 +0000 UTC m=+403.587479579 I0420 12:01:36.829170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2nvjp" condition "Approved" to 2026-04-20 12:01:36.829154614 +0000 UTC m=+403.733672050 I0420 12:01:36.843714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:36.851431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2nvjp" condition "Ready" to 2026-04-20 12:01:36.851419549 +0000 UTC m=+403.755937015 I0420 12:01:36.874326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xrtxv" condition "Approved" to 2026-04-20 12:01:36.874308818 +0000 UTC m=+403.778826284 I0420 12:01:36.875128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:36.879954 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:01:36.879943154 +0000 UTC m=+403.784460590 I0420 12:01:36.890761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xrtxv" condition "Ready" to 2026-04-20 12:01:36.890743953 +0000 UTC m=+403.795261409 I0420 12:01:36.901459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:36.909553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qqkbh" condition "Approved" to 2026-04-20 12:01:36.909544264 +0000 UTC m=+403.814061700 I0420 12:01:36.979687 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:01:36.979674309 +0000 UTC m=+403.884191745 I0420 12:01:37.189855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qqkbh" condition "Ready" to 2026-04-20 12:01:37.189839748 +0000 UTC m=+404.094357174 I0420 12:01:37.483751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:37.484155 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:01:37.484149437 +0000 UTC m=+404.388666873 I0420 12:01:37.879110 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:01:37.879100334 +0000 UTC m=+404.783617770 I0420 12:01:38.033410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:38.131557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:38.132033 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:01:38.132022419 +0000 UTC m=+405.036539885 I0420 12:01:38.378861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:44.376499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:01:44.376526 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" condition "Issuing" to 2026-04-20 12:01:44.37651926 +0000 UTC m=+411.281036686 I0420 12:01:44.376880 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" condition "Ready" to 2026-04-20 12:01:44.376877048 +0000 UTC m=+411.281394474 I0420 12:01:44.393434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:44.393531 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" condition "Ready" to 2026-04-20 12:01:44.393523998 +0000 UTC m=+411.298041424 I0420 12:01:44.567510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:44.701118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qtq8h-d9cqc" condition "Approved" to 2026-04-20 12:01:44.701099136 +0000 UTC m=+411.605616572 I0420 12:01:44.723758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qtq8h-d9cqc" condition "Ready" to 2026-04-20 12:01:44.723741139 +0000 UTC m=+411.628258595 I0420 12:01:44.749274 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:01:44.749262862 +0000 UTC m=+411.653780288 I0420 12:01:44.767794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:01:44.832754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qtq8h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:06.272705 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 12:02:06.272691037 +0000 UTC m=+433.177208463 I0420 12:02:06.273081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:02:06.273099 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 12:02:06.273095307 +0000 UTC m=+433.177612733 I0420 12:02:06.293201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:06.293268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:02:06.293299 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 12:02:06.293290892 +0000 UTC m=+433.197808328 I0420 12:02:06.652791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:06.662179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-r2zjn" condition "Approved" to 2026-04-20 12:02:06.662162812 +0000 UTC m=+433.566680248 I0420 12:02:06.678808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-r2zjn" condition "Ready" to 2026-04-20 12:02:06.678796561 +0000 UTC m=+433.583313997 I0420 12:02:06.707999 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:02:06.707985773 +0000 UTC m=+433.612503209 I0420 12:02:06.727436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:23.725233 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:05:23.725278 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 12:05:23.725272984 +0000 UTC m=+630.629790410 I0420 12:05:23.725303 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 12:05:23.725283254 +0000 UTC m=+630.629800720 I0420 12:05:23.742186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:23.742349 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 12:05:23.742336483 +0000 UTC m=+630.646853939 I0420 12:05:23.861810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:23.894961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sm2v9" condition "Approved" to 2026-04-20 12:05:23.894948017 +0000 UTC m=+630.799465453 I0420 12:05:23.915007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sm2v9" condition "Ready" to 2026-04-20 12:05:23.914997698 +0000 UTC m=+630.819515134 I0420 12:05:23.942377 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:05:23.942362685 +0000 UTC m=+630.846880121 I0420 12:05:23.959793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:23.960464 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:05:23.960455639 +0000 UTC m=+630.864973075 I0420 12:05:23.977017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:23.977263 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:05:23.977256402 +0000 UTC m=+630.881773838 I0420 12:07:45.923181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:07:45.923202 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 12:07:45.923178662 +0000 UTC m=+772.827696118 I0420 12:07:45.923272 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 12:07:45.923260894 +0000 UTC m=+772.827778350 I0420 12:07:45.940352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:07:45.940454 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 12:07:45.940443546 +0000 UTC m=+772.844961002 I0420 12:07:46.188350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:07:46.218452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dhk85" condition "Approved" to 2026-04-20 12:07:46.218438384 +0000 UTC m=+773.122955820 I0420 12:07:46.239340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dhk85" condition "Ready" to 2026-04-20 12:07:46.239325054 +0000 UTC m=+773.143842510 I0420 12:07:46.275542 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:07:46.275533514 +0000 UTC m=+773.180050940 I0420 12:07:46.295373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:07:46.367127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:08:48.221303 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 12:08:48.221283683 +0000 UTC m=+835.125801119 I0420 12:08:48.221668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:08:48.221691 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 12:08:48.221686122 +0000 UTC m=+835.126203558 I0420 12:08:48.278860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:08:48.278949 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 12:08:48.278943015 +0000 UTC m=+835.183460441 I0420 12:08:48.378472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:08:48.421529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4qb8g" condition "Approved" to 2026-04-20 12:08:48.421516323 +0000 UTC m=+835.326033779 I0420 12:08:48.443842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4qb8g" condition "Ready" to 2026-04-20 12:08:48.443832798 +0000 UTC m=+835.348350214 I0420 12:08:48.493122 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:08:48.49310847 +0000 UTC m=+835.397625926 I0420 12:08:48.511990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:08:48.513528 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:08:48.51352019 +0000 UTC m=+835.418037606 I0420 12:08:48.520984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:08:48.537112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:08:48.537379 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:08:48.537371491 +0000 UTC m=+835.441888927 I0420 12:11:54.459141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:11:54.459264 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 12:11:54.459233556 +0000 UTC m=+1021.363750992 I0420 12:11:54.459258 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 12:11:54.459238416 +0000 UTC m=+1021.363755852 I0420 12:11:54.478389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:11:54.478514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:11:54.478549 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 12:11:54.478536829 +0000 UTC m=+1021.383054295 I0420 12:11:54.895673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:11:54.901943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-khqr6" condition "Approved" to 2026-04-20 12:11:54.90192687 +0000 UTC m=+1021.806444306 I0420 12:11:54.924481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-khqr6" condition "Ready" to 2026-04-20 12:11:54.924468001 +0000 UTC m=+1021.828985437 I0420 12:11:54.958264 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:11:54.958246521 +0000 UTC m=+1021.862763977 I0420 12:11:54.983633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"