I0409 02:06:27.024471 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 02:06:27.024665 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 02:06:27.024797 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 02:06:27.030288 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 02:06:27.030766 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 02:06:27.030898 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 02:06:27.031038 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 02:06:27.033536 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 02:06:27.055627 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 02:06:27.055949 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 02:06:27.056057 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 02:06:27.056083 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 02:06:27.056112 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 02:06:27.061848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 02:06:27.067558 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 02:06:27.067593 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 02:06:27.067640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 02:06:27.070599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 02:06:27.073278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 02:06:27.075836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 02:06:27.078648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 02:06:27.081133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 02:06:27.086997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 02:06:27.090287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 02:06:27.092892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 02:06:27.095178 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 02:06:27.097762 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 02:06:27.100240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 02:06:27.102184 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 02:06:27.103865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 02:06:27.110351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 02:06:27.113823 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 02:06:27.116837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 02:06:27.119196 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.121130 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.121677 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.121762 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.139880 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.159544 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.176904 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.193688 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.211400 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:27.211960 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:38.570026 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 02:06:38.570008927 +0000 UTC m=+11.580374252 I0409 02:06:39.252177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:06:39.252193 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 02:06:39.252169774 +0000 UTC m=+12.262535059 I0409 02:06:39.252449 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 02:06:39.25243767 +0000 UTC m=+12.262802965 E0409 02:06:39.267516 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:06:39.267572 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 02:06:39.267567681 +0000 UTC m=+12.277932956 E0409 02:06:39.267591 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:06:39.271916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:39.272026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 02:06:39.272018622 +0000 UTC m=+12.282383907 E0409 02:06:39.278429 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 02:06:39.278487 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:06:39.278509 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:06:39.278532 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 02:06:39.289810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:39.314642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l6qtc" condition "Approved" to 2026-04-09 02:06:39.314621003 +0000 UTC m=+12.324986338 I0409 02:06:39.329755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l6qtc" condition "Ready" to 2026-04-09 02:06:39.329742024 +0000 UTC m=+12.340107309 I0409 02:06:39.354991 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:06:39.354960983 +0000 UTC m=+12.365326308 I0409 02:06:39.375243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:39.375482 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:06:39.375474797 +0000 UTC m=+12.385840092 I0409 02:06:39.381226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:39.391423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:06:44.279045 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:06:44.279027071 +0000 UTC m=+17.289392396 I0409 02:07:08.337201 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 02:07:08.337186033 +0000 UTC m=+41.347551328 I0409 02:07:08.337323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:08.337368 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 02:07:08.337359607 +0000 UTC m=+41.347724902 I0409 02:07:08.363660 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 02:07:08.363645041 +0000 UTC m=+41.374010366 I0409 02:07:08.369019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:08.369084 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 02:07:08.369078624 +0000 UTC m=+41.379443919 I0409 02:07:08.660814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:08.694254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2vqs9" condition "Approved" to 2026-04-09 02:07:08.694240382 +0000 UTC m=+41.704605697 I0409 02:07:08.730584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2vqs9" condition "Ready" to 2026-04-09 02:07:08.730567943 +0000 UTC m=+41.740933238 I0409 02:07:08.764108 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:08.764096049 +0000 UTC m=+41.774461344 I0409 02:07:08.787752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:23.067238 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-09 02:09:23.067178542 +0000 UTC m=+176.077543917 I0409 02:09:23.067364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:23.067447 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-09 02:09:23.067436369 +0000 UTC m=+176.077801684 E0409 02:09:23.086315 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:23.086390 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-09 02:09:23.086382045 +0000 UTC m=+176.096747360 I0409 02:09:23.086504 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:23.089318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:23.089483 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-09 02:09:23.089471404 +0000 UTC m=+176.099836729 E0409 02:09:23.103681 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0409 02:09:23.103759 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:23.103781 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0409 02:09:23.103815 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0409 02:09:23.105298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:23.105329 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-09 02:09:23.105321851 +0000 UTC m=+176.115687146 I0409 02:09:23.105493 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-09 02:09:23.105486175 +0000 UTC m=+176.115851460 I0409 02:09:23.120869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:23.120970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:23.120996 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-09 02:09:23.120988064 +0000 UTC m=+176.131353389 I0409 02:09:23.199454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:23.230805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-wgcbb" condition "Approved" to 2026-04-09 02:09:23.230789676 +0000 UTC m=+176.241154981 I0409 02:09:23.264568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-wgcbb" condition "Ready" to 2026-04-09 02:09:23.264552506 +0000 UTC m=+176.274917821 I0409 02:09:23.301979 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:23.301966798 +0000 UTC m=+176.312332093 I0409 02:09:23.320126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:23.320416 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:23.320410714 +0000 UTC m=+176.330776009 I0409 02:09:23.336439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-9d4c4" condition "Approved" to 2026-04-09 02:09:23.336427914 +0000 UTC m=+176.346793209 I0409 02:09:23.338588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:23.355569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-9d4c4" condition "Ready" to 2026-04-09 02:09:23.355552104 +0000 UTC m=+176.365917399 I0409 02:09:28.104241 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:28.104227688 +0000 UTC m=+181.114593003 I0409 02:09:28.121255 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-9d4c4" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:28.121237241 +0000 UTC m=+181.131602556 I0409 02:09:28.148939 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:28.148922934 +0000 UTC m=+181.159288259 I0409 02:09:28.167716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:28.168135 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:28.168123176 +0000 UTC m=+181.178488491 I0409 02:09:28.186871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:12:28.606246 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-102.nip.io-tls" condition "Ready" to 2026-04-09 02:12:28.606215902 +0000 UTC m=+361.616581197 I0409 02:12:28.606271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-102.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:12:28.606314 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-102.nip.io-tls" condition "Issuing" to 2026-04-09 02:12:28.606301634 +0000 UTC m=+361.616666969 I0409 02:12:28.622871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-102.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-102.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:12:28.622931 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-102.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:12:28.622950 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-102.nip.io-tls" condition "Issuing" to 2026-04-09 02:12:28.622946055 +0000 UTC m=+361.633311350 I0409 02:12:29.018284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-102.nip.io-tls-ccn76" condition "Approved" to 2026-04-09 02:12:29.018268623 +0000 UTC m=+362.028633938 I0409 02:12:29.037567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-102.nip.io-tls-ccn76" condition "Ready" to 2026-04-09 02:12:29.037555262 +0000 UTC m=+362.047920557 I0409 02:12:29.066172 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-102.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:12:29.066161849 +0000 UTC m=+362.076527174 I0409 02:12:29.133642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-102.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-102.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:12:29.134205 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-102.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:12:29.134194623 +0000 UTC m=+362.144559948 I0409 02:12:29.166891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-102.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-102.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" E0409 02:13:40.212043 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out E0409 02:14:19.931353 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out