I0505 11:20:17.080590 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 11:20:17.080755 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 11:20:17.080836 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 11:20:17.084717 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 11:20:17.085750 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 11:20:17.086078 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 11:20:17.086222 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 11:20:17.093109 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 11:20:17.108866 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 11:20:17.113150 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 11:20:17.113231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 11:20:17.116086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 11:20:17.118828 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 11:20:17.121186 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 11:20:17.126383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 11:20:17.130531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 11:20:17.134178 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 11:20:17.136202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 11:20:17.138173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 11:20:17.140028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 11:20:17.142054 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 11:20:17.142087 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 11:20:17.142121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 11:20:17.143990 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 11:20:17.144010 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 11:20:17.144112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 11:20:17.147340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 11:20:17.151254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 11:20:17.153056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 11:20:17.154646 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 11:20:17.154797 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 11:20:17.156594 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 11:20:17.158256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 11:20:17.161900 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.161965 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.162066 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.162126 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.162132 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.162147 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.162562 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.162569 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.162850 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:17.245963 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:20:30.121588 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 11:20:30.121567759 +0000 UTC m=+13.078754335 I0505 11:20:30.837748 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 11:20:30.83773587 +0000 UTC m=+13.794922416 I0505 11:20:30.837893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:20:30.837962 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 11:20:30.837952974 +0000 UTC m=+13.795139530 E0505 11:20:30.851706 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:20:30.851808 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 11:20:30.851796709 +0000 UTC m=+13.808983285 E0505 11:20:30.851845 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:20:30.854382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:20:30.854475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:20:30.854511 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 11:20:30.854505741 +0000 UTC m=+13.811692297 E0505 11:20:30.861992 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 11:20:30.862123 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:20:30.862170 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:20:30.862211 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 11:20:30.890025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:20:30.897523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xlm7d" condition "Approved" to 2026-05-05 11:20:30.897507075 +0000 UTC m=+13.854693651 I0505 11:20:30.908244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xlm7d" condition "Ready" to 2026-05-05 11:20:30.908231451 +0000 UTC m=+13.865418037 I0505 11:20:30.951396 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:20:30.951380828 +0000 UTC m=+13.908567374 I0505 11:20:30.963963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:20:30.964625 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:20:30.964615861 +0000 UTC m=+13.921802447 I0505 11:20:30.980301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:20:30.980638 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:20:30.980631109 +0000 UTC m=+13.937817665 I0505 11:20:30.981316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:20:35.863412 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:20:35.863397881 +0000 UTC m=+18.820584457 I0505 11:20:57.429154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:20:57.429198 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 11:20:57.429175321 +0000 UTC m=+40.386361907 I0505 11:20:57.429201 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 11:20:57.429190451 +0000 UTC m=+40.386377027 I0505 11:20:57.440103 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 11:20:57.440090001 +0000 UTC m=+40.397276557 I0505 11:20:57.457431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:20:57.457642 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 11:20:57.457634189 +0000 UTC m=+40.414820755 I0505 11:20:57.640653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:20:57.671652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cczg5" condition "Approved" to 2026-05-05 11:20:57.671626087 +0000 UTC m=+40.628812643 I0505 11:20:57.701668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cczg5" condition "Ready" to 2026-05-05 11:20:57.701656865 +0000 UTC m=+40.658843421 I0505 11:20:57.731170 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:20:57.731155634 +0000 UTC m=+40.688342220 I0505 11:20:57.755880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:43.485870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:22:43.485918 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-05 11:22:43.485906059 +0000 UTC m=+146.443092635 I0505 11:22:43.486027 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-05 11:22:43.486013921 +0000 UTC m=+146.443200507 E0505 11:22:43.503782 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 11:22:43.503828 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-05 11:22:43.503820584 +0000 UTC m=+146.461007140 I0505 11:22:43.503875 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 11:22:43.505333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:43.505428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:22:43.505466 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-05 11:22:43.505456975 +0000 UTC m=+146.462643521 E0505 11:22:43.514298 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0505 11:22:43.514499 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 11:22:43.514549 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0505 11:22:43.514612 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0505 11:22:43.522443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:22:43.522473 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-05 11:22:43.522463822 +0000 UTC m=+146.479650378 I0505 11:22:43.522548 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-05 11:22:43.522527853 +0000 UTC m=+146.479714429 I0505 11:22:43.558586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:43.558656 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-05 11:22:43.558648047 +0000 UTC m=+146.515834603 I0505 11:22:43.778607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-bttbm" condition "Approved" to 2026-05-05 11:22:43.778576565 +0000 UTC m=+146.735763141 I0505 11:22:43.812292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-bttbm" condition "Ready" to 2026-05-05 11:22:43.812275052 +0000 UTC m=+146.769461628 I0505 11:22:43.843035 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:43.843005333 +0000 UTC m=+146.800191919 I0505 11:22:43.863721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:43.888899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:43.921597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-586n8" condition "Approved" to 2026-05-05 11:22:43.921579824 +0000 UTC m=+146.878766370 I0505 11:22:43.937619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-586n8" condition "Ready" to 2026-05-05 11:22:43.937605452 +0000 UTC m=+146.894792008 I0505 11:22:48.515898 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:48.515882328 +0000 UTC m=+151.473068904 I0505 11:22:48.532889 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-586n8" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:48.532874434 +0000 UTC m=+151.490060990 I0505 11:22:48.563403 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:48.563381511 +0000 UTC m=+151.520568087 I0505 11:22:48.592965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:48.636933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:25:21.636250 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready" to 2026-05-05 11:25:21.636211165 +0000 UTC m=+304.593397741 I0505 11:25:21.636560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:25:21.636660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Issuing" to 2026-05-05 11:25:21.636649513 +0000 UTC m=+304.593836089 I0505 11:25:21.652536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:25:21.652665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:25:21.652705 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Issuing" to 2026-05-05 11:25:21.652694496 +0000 UTC m=+304.609881082 I0505 11:25:21.787438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:25:21.793837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-hcx8f" condition "Approved" to 2026-05-05 11:25:21.793823721 +0000 UTC m=+304.751010277 I0505 11:25:21.843848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-hcx8f" condition "Ready" to 2026-05-05 11:25:21.843836723 +0000 UTC m=+304.801023269 I0505 11:25:21.872269 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:25:21.872224546 +0000 UTC m=+304.829411122 I0505 11:25:21.896599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:26:31.762426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:26:31.762467 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 11:26:31.76245703 +0000 UTC m=+374.719643576 I0505 11:26:31.762585 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 11:26:31.762561262 +0000 UTC m=+374.719747848 E0505 11:26:31.773934 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:26:31.774038 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 11:26:31.774028671 +0000 UTC m=+374.731215227 E0505 11:26:31.774150 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:26:31.775888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:26:31.775983 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 11:26:31.775977278 +0000 UTC m=+374.733163834 E0505 11:26:31.782607 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 11:26:31.782710 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:26:31.782744 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:26:31.782780 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 11:26:31.793155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:26:31.814741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t2qsl" condition "Approved" to 2026-05-05 11:26:31.814713807 +0000 UTC m=+374.771900393 I0505 11:26:31.825213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t2qsl" condition "Ready" to 2026-05-05 11:26:31.825200357 +0000 UTC m=+374.782386903 I0505 11:26:31.850750 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:26:31.850731043 +0000 UTC m=+374.807917619 I0505 11:26:31.864572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:26:31.864808 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:26:31.864799581 +0000 UTC m=+374.821986137 I0505 11:26:31.880429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:26:31.883791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:26:36.784520 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:26:36.783833593 +0000 UTC m=+379.741020169 I0505 11:27:13.317430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:13.317087 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 11:27:13.317070454 +0000 UTC m=+416.274257000 I0505 11:27:13.317560 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 11:27:13.317550974 +0000 UTC m=+416.274737530 I0505 11:27:13.324799 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 11:27:13.324787382 +0000 UTC m=+416.281973928 I0505 11:27:13.325006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:13.325075 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 11:27:13.325062027 +0000 UTC m=+416.282248573 I0505 11:27:13.325191 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:13.325214 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 11:27:13.32521161 +0000 UTC m=+416.282398156 I0505 11:27:13.326332 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 11:27:13.325372803 +0000 UTC m=+416.282559369 I0505 11:27:13.341941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:13.342407 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 11:27:13.342392218 +0000 UTC m=+416.299578764 I0505 11:27:13.347367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:13.347489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:13.347535 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 11:27:13.347527455 +0000 UTC m=+416.304714001 I0505 11:27:13.359061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:13.359221 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 11:27:13.359210219 +0000 UTC m=+416.316396775 I0505 11:27:13.522401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:13.531405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q7zz9" condition "Approved" to 2026-05-05 11:27:13.531390733 +0000 UTC m=+416.488577319 I0505 11:27:13.549630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q7zz9" condition "Ready" to 2026-05-05 11:27:13.549616431 +0000 UTC m=+416.506802987 I0505 11:27:13.596852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:13.610282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:13.610330 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 11:27:13.610319798 +0000 UTC m=+416.567506364 I0505 11:27:13.651838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f74mr" condition "Approved" to 2026-05-05 11:27:13.65181837 +0000 UTC m=+416.609004916 I0505 11:27:13.656353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:13.656438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:13.656821 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:13.656803165 +0000 UTC m=+416.613989711 I0505 11:27:13.661434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nnbj5" condition "Approved" to 2026-05-05 11:27:13.661426872 +0000 UTC m=+416.618613418 I0505 11:27:13.670043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f74mr" condition "Ready" to 2026-05-05 11:27:13.670030787 +0000 UTC m=+416.627217333 I0505 11:27:13.772493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nnbj5" condition "Ready" to 2026-05-05 11:27:13.772478791 +0000 UTC m=+416.729665347 I0505 11:27:14.463228 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:14.463213756 +0000 UTC m=+417.420400332 I0505 11:27:14.766231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:14.766828 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:14.766802576 +0000 UTC m=+417.723989122 I0505 11:27:14.967810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bhtzw" condition "Approved" to 2026-05-05 11:27:14.967796059 +0000 UTC m=+417.924982615 I0505 11:27:15.273585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bhtzw" condition "Ready" to 2026-05-05 11:27:15.273571841 +0000 UTC m=+418.230758407 I0505 11:27:15.665086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:15.764502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:15.960544 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-bhtzw" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-dj78l" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0505 11:27:16.171153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bbdw4" condition "Approved" to 2026-05-05 11:27:16.171128281 +0000 UTC m=+419.128314837 I0505 11:27:16.538450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bbdw4" condition "Ready" to 2026-05-05 11:27:16.538437486 +0000 UTC m=+419.495624042 I0505 11:27:16.714154 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:16.714124477 +0000 UTC m=+419.671311033 I0505 11:27:16.812857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:16.813562 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:16.813546074 +0000 UTC m=+419.770732650 I0505 11:27:17.066519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:17.111009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:21.159344 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" condition "Ready" to 2026-05-05 11:27:21.159329941 +0000 UTC m=+424.116516487 I0505 11:27:21.159474 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:21.159519 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" condition "Issuing" to 2026-05-05 11:27:21.159507245 +0000 UTC m=+424.116693821 I0505 11:27:21.174535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:21.174641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:21.174680 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" condition "Issuing" to 2026-05-05 11:27:21.174672703 +0000 UTC m=+424.131859249 I0505 11:27:21.702345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fzdwr-gx6dk" condition "Approved" to 2026-05-05 11:27:21.702330597 +0000 UTC m=+424.659517153 I0505 11:27:21.722064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fzdwr-gx6dk" condition "Ready" to 2026-05-05 11:27:21.722046643 +0000 UTC m=+424.679233229 I0505 11:27:21.750866 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:21.750849023 +0000 UTC m=+424.708035579 I0505 11:27:21.768434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:21.768838 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:21.768830126 +0000 UTC m=+424.726016682 I0505 11:27:21.788846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:21.789311 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fzdwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:21.789300826 +0000 UTC m=+424.746487392 I0505 11:27:42.064044 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 11:27:42.064021798 +0000 UTC m=+445.021208384 I0505 11:27:42.064256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:42.064328 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 11:27:42.064305643 +0000 UTC m=+445.021492199 I0505 11:27:42.080249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:42.080368 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 11:27:42.08035713 +0000 UTC m=+445.037543686 I0505 11:27:42.188598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:42.216729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-t8d4k" condition "Approved" to 2026-05-05 11:27:42.21671175 +0000 UTC m=+445.173898316 I0505 11:27:42.236010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-t8d4k" condition "Ready" to 2026-05-05 11:27:42.235998028 +0000 UTC m=+445.193184574 I0505 11:27:42.267374 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:42.267358656 +0000 UTC m=+445.224545212 I0505 11:27:42.316453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:42.328318 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:42.328309929 +0000 UTC m=+445.285496475 I0505 11:27:42.332535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:42.352551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:42.353440 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:42.353428028 +0000 UTC m=+445.310614574 I0505 11:27:42.354490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:31:04.488741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:31:04.488783 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 11:31:04.488734665 +0000 UTC m=+647.445921241 I0505 11:31:04.488800 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 11:31:04.488792806 +0000 UTC m=+647.445979362 I0505 11:31:04.502946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:31:04.503030 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 11:31:04.503021285 +0000 UTC m=+647.460207841 I0505 11:31:04.579985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:31:04.611312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5btpp" condition "Approved" to 2026-05-05 11:31:04.61130259 +0000 UTC m=+647.568489136 I0505 11:31:04.628264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5btpp" condition "Ready" to 2026-05-05 11:31:04.62825028 +0000 UTC m=+647.585436836 I0505 11:31:04.656360 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:31:04.656345871 +0000 UTC m=+647.613532437 I0505 11:31:04.673103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:31:04.673635 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:31:04.673626647 +0000 UTC m=+647.630813203 I0505 11:31:04.693001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:33:31.690015 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:33:31.690099 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 11:33:31.690073928 +0000 UTC m=+794.647260484 I0505 11:33:31.690105 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 11:33:31.690086288 +0000 UTC m=+794.647272854 I0505 11:33:31.705459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:33:31.705598 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 11:33:31.70555761 +0000 UTC m=+794.662744196 I0505 11:33:31.988312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:33:32.024184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-cc66d" condition "Approved" to 2026-05-05 11:33:32.024171584 +0000 UTC m=+794.981358170 I0505 11:33:32.042218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-cc66d" condition "Ready" to 2026-05-05 11:33:32.042205154 +0000 UTC m=+794.999391710 I0505 11:33:32.071677 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:33:32.071663371 +0000 UTC m=+795.028849927 I0505 11:33:32.098375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:33:32.098851 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:33:32.098842863 +0000 UTC m=+795.056029419 I0505 11:33:32.103013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:33:32.116314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:34:37.183515 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 11:34:37.183499646 +0000 UTC m=+860.140686212 I0505 11:34:37.183634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:34:37.183686 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-05 11:34:37.183675419 +0000 UTC m=+860.140861995 I0505 11:34:37.199514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:34:37.199688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:34:37.199748 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-05 11:34:37.199739642 +0000 UTC m=+860.156926208 I0505 11:34:37.383810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-69j6s" condition "Approved" to 2026-05-05 11:34:37.383796366 +0000 UTC m=+860.340982932 I0505 11:34:37.400672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-69j6s" condition "Ready" to 2026-05-05 11:34:37.400661274 +0000 UTC m=+860.357847820 I0505 11:34:37.438992 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:34:37.438973367 +0000 UTC m=+860.396159963 I0505 11:34:37.458866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:34:37.459129 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:34:37.459122968 +0000 UTC m=+860.416309514 I0505 11:34:37.477758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:37:41.003566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:37:41.003683 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 11:37:41.003637594 +0000 UTC m=+1043.960824200 I0505 11:37:41.003853 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-05 11:37:41.003847828 +0000 UTC m=+1043.961034404 I0505 11:37:41.021901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:37:41.021969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:37:41.021985 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 11:37:41.02197857 +0000 UTC m=+1043.979165126 I0505 11:37:41.547058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-b9jvf" condition "Approved" to 2026-05-05 11:37:41.547048869 +0000 UTC m=+1044.504235415 I0505 11:37:41.566803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-b9jvf" condition "Ready" to 2026-05-05 11:37:41.566792403 +0000 UTC m=+1044.523978959 I0505 11:37:41.591456 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:37:41.591444268 +0000 UTC m=+1044.548630824 I0505 11:37:41.610300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:43:55.291994 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 11:43:55.291938629 +0000 UTC m=+1418.249125195 I0505 11:43:55.292236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:43:55.292266 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 11:43:55.292257615 +0000 UTC m=+1418.249444191 I0505 11:43:55.310763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:43:55.310839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:43:55.310855 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 11:43:55.310849855 +0000 UTC m=+1418.268036401 I0505 11:43:55.614191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:43:55.620416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-pskpm" condition "Approved" to 2026-05-05 11:43:55.620407786 +0000 UTC m=+1418.577594332 I0505 11:43:55.639558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-pskpm" condition "Ready" to 2026-05-05 11:43:55.639546907 +0000 UTC m=+1418.596733463 I0505 11:43:55.665979 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:43:55.665959844 +0000 UTC m=+1418.623146400 I0505 11:43:55.686091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:27.519176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:45:27.519293 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 11:45:27.519268468 +0000 UTC m=+1510.476455054 I0505 11:45:27.519556 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 11:45:27.519525313 +0000 UTC m=+1510.476711899 I0505 11:45:27.539589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:27.539708 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 11:45:27.539697313 +0000 UTC m=+1510.496883869 I0505 11:45:27.649037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:27.684595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-htzx9" condition "Approved" to 2026-05-05 11:45:27.68457961 +0000 UTC m=+1510.641766166 I0505 11:45:27.706798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-htzx9" condition "Ready" to 2026-05-05 11:45:27.706781038 +0000 UTC m=+1510.663967594 I0505 11:45:27.737979 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:45:27.737961045 +0000 UTC m=+1510.695147601 I0505 11:45:27.757324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:27.758032 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:45:27.758022793 +0000 UTC m=+1510.715209329 I0505 11:45:27.781516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"