I0501 00:59:21.437709 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0501 00:59:21.437899 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0501 00:59:21.437988 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0501 00:59:21.444956 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0501 00:59:21.445531 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0501 00:59:21.445712 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0501 00:59:21.445682 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0501 00:59:21.448924 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0501 00:59:21.461984 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0501 00:59:21.466148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0501 00:59:21.469115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0501 00:59:21.474787 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0501 00:59:21.474912 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0501 00:59:21.478676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0501 00:59:21.480511 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0501 00:59:21.482255 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0501 00:59:21.482276 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0501 00:59:21.482297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0501 00:59:21.484092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0501 00:59:21.485854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0501 00:59:21.487834 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0501 00:59:21.487940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0501 00:59:21.493913 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0501 00:59:21.496803 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0501 00:59:21.499071 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0501 00:59:21.499095 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0501 00:59:21.499145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0501 00:59:21.501674 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0501 00:59:21.503832 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0501 00:59:21.505307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0501 00:59:21.507205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0501 00:59:21.511034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0501 00:59:21.516789 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0501 00:59:21.522337 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.522343 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.522444 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.539000 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.552125 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.573786 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.590338 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.608244 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.617140 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:21.623592 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0501 00:59:47.048662 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-01 00:59:47.048643368 +0000 UTC m=+25.650455425 I0501 00:59:47.950922 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-01 00:59:47.950896633 +0000 UTC m=+26.552708780 I0501 00:59:47.950992 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 00:59:47.951070 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-01 00:59:47.951056368 +0000 UTC m=+26.552868445 E0501 00:59:48.113328 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0501 00:59:48.113438 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-01 00:59:48.113431069 +0000 UTC m=+26.715243106 E0501 00:59:48.113461 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0501 00:59:48.118740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 00:59:48.119341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 00:59:48.119422 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-01 00:59:48.119411428 +0000 UTC m=+26.721223485 E0501 00:59:48.126986 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0501 00:59:48.127336 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 00:59:48.127390 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 00:59:48.127450 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0501 00:59:48.162214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7twtc" condition "Approved" to 2026-05-01 00:59:48.162194817 +0000 UTC m=+26.764006894 I0501 00:59:48.177926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7twtc" condition "Ready" to 2026-05-01 00:59:48.177910973 +0000 UTC m=+26.779723030 I0501 00:59:48.205800 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 00:59:48.205787152 +0000 UTC m=+26.807599209 I0501 00:59:48.221739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 00:59:48.222093 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 00:59:48.222059626 +0000 UTC m=+26.823871683 I0501 00:59:48.241553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 00:59:48.247414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 00:59:53.128144 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 00:59:53.128133489 +0000 UTC m=+31.729945536 I0501 01:00:35.241989 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:00:35.242027 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-01 01:00:35.24201965 +0000 UTC m=+73.843831707 I0501 01:00:35.242197 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-01 01:00:35.242181135 +0000 UTC m=+73.843993192 I0501 01:00:35.254273 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-01 01:00:35.254257349 +0000 UTC m=+73.856069406 I0501 01:00:35.262392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:00:35.262481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:00:35.262521 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-01 01:00:35.262504451 +0000 UTC m=+73.864316508 I0501 01:00:35.541063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-snt9x" condition "Approved" to 2026-05-01 01:00:35.541043999 +0000 UTC m=+74.142856056 I0501 01:00:35.578139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-snt9x" condition "Ready" to 2026-05-01 01:00:35.578081347 +0000 UTC m=+74.179893404 I0501 01:00:35.611280 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:00:35.611258562 +0000 UTC m=+74.213070649 I0501 01:00:35.632124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:00:35.632492 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:00:35.632485937 +0000 UTC m=+74.234297994 I0501 01:00:35.656712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:49.112802 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-01 01:02:49.112751017 +0000 UTC m=+207.714563144 I0501 01:02:49.113556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:02:49.113595 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-01 01:02:49.113588033 +0000 UTC m=+207.715400120 E0501 01:02:49.125250 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0501 01:02:49.125335 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-01 01:02:49.125325417 +0000 UTC m=+207.727137474 I0501 01:02:49.125364 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0501 01:02:49.127082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:49.127152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:02:49.127178 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-01 01:02:49.127171095 +0000 UTC m=+207.728983172 E0501 01:02:49.133621 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0501 01:02:49.134428 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0501 01:02:49.134473 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0501 01:02:49.134581 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0501 01:02:49.139255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:02:49.139288 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-01 01:02:49.13927588 +0000 UTC m=+207.741087937 I0501 01:02:49.139321 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-01 01:02:49.1392618 +0000 UTC m=+207.741073847 I0501 01:02:49.156868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:49.156987 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-01 01:02:49.156977644 +0000 UTC m=+207.758789721 I0501 01:02:49.330045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:49.366446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w5dm6" condition "Approved" to 2026-05-01 01:02:49.366431266 +0000 UTC m=+207.968243353 I0501 01:02:49.369445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:49.381359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-26shs" condition "Approved" to 2026-05-01 01:02:49.381345051 +0000 UTC m=+207.983157098 I0501 01:02:49.385720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w5dm6" condition "Ready" to 2026-05-01 01:02:49.385699849 +0000 UTC m=+207.987511936 I0501 01:02:49.411040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-26shs" condition "Ready" to 2026-05-01 01:02:49.411026995 +0000 UTC m=+208.012839032 I0501 01:02:49.438229 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:02:49.43821636 +0000 UTC m=+208.040028417 I0501 01:02:49.460176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:54.135131 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:02:54.13511045 +0000 UTC m=+212.736922537 I0501 01:02:54.151222 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-w5dm6" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:02:54.151204792 +0000 UTC m=+212.753016849 I0501 01:02:54.185778 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:02:54.185763471 +0000 UTC m=+212.787575548 I0501 01:02:54.212365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:54.212857 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:02:54.212847243 +0000 UTC m=+212.814659310 I0501 01:02:54.222562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:54.233048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:54.233783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:02:54.234374 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:02:54.234360247 +0000 UTC m=+212.836172324 I0501 01:05:35.233469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:05:35.233550 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-05-01 01:05:35.23354217 +0000 UTC m=+373.835354227 I0501 01:05:35.233396 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-05-01 01:05:35.233353874 +0000 UTC m=+373.835165931 I0501 01:05:35.253062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:05:35.253149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:05:35.253170 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-05-01 01:05:35.253162806 +0000 UTC m=+373.854974893 I0501 01:05:35.548725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:05:35.558021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-dxf7j" condition "Approved" to 2026-05-01 01:05:35.558009372 +0000 UTC m=+374.159821429 I0501 01:05:35.576541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-dxf7j" condition "Ready" to 2026-05-01 01:05:35.576524382 +0000 UTC m=+374.178336439 I0501 01:05:35.601588 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:05:35.60157281 +0000 UTC m=+374.203384867 I0501 01:05:35.619563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:05:35.620085 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:05:35.62007616 +0000 UTC m=+374.221888227 I0501 01:05:35.636360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:06:45.292064 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-01 01:06:45.292004228 +0000 UTC m=+443.893816315 I0501 01:06:45.292151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:06:45.292341 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-01 01:06:45.292317278 +0000 UTC m=+443.894129355 E0501 01:06:45.310209 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0501 01:06:45.310283 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-01 01:06:45.310274195 +0000 UTC m=+443.912086252 E0501 01:06:45.310360 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0501 01:06:45.313607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:06:45.313727 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-01 01:06:45.313712654 +0000 UTC m=+443.915524731 E0501 01:06:45.324449 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0501 01:06:45.324533 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 01:06:45.324563 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0501 01:06:45.324592 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0501 01:06:45.329641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:06:45.329734 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-01 01:06:45.329724381 +0000 UTC m=+443.931536438 I0501 01:06:45.330265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hd27p" condition "Approved" to 2026-05-01 01:06:45.330243317 +0000 UTC m=+443.932055394 I0501 01:06:45.342264 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-01 01:06:45.342256817 +0000 UTC m=+443.944068874 I0501 01:06:45.342454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hd27p" condition "Ready" to 2026-05-01 01:06:45.342447173 +0000 UTC m=+443.944259230 I0501 01:06:45.351356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:06:45.367969 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:06:45.36795561 +0000 UTC m=+443.969767667 I0501 01:06:45.387446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:06:45.431796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:06:50.324855 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:06:50.324846379 +0000 UTC m=+448.926658426 I0501 01:07:29.181052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:07:29.181094 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-01 01:07:29.181087257 +0000 UTC m=+487.782899304 I0501 01:07:29.181150 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-01 01:07:29.181136679 +0000 UTC m=+487.782948736 I0501 01:07:29.200111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:07:29.200148 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-01 01:07:29.200140889 +0000 UTC m=+487.801952946 I0501 01:07:29.200473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:07:29.200490 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-01 01:07:29.20048659 +0000 UTC m=+487.802298637 I0501 01:07:29.200508 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-01 01:07:29.200496191 +0000 UTC m=+487.802308238 I0501 01:07:29.200752 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-01 01:07:29.200748149 +0000 UTC m=+487.802560196 I0501 01:07:29.250440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.251491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:07:29.251578 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-01 01:07:29.251554423 +0000 UTC m=+487.853366480 I0501 01:07:29.266044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.266148 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-01 01:07:29.266141763 +0000 UTC m=+487.867953800 I0501 01:07:29.274356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.274473 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-01 01:07:29.274463636 +0000 UTC m=+487.876275703 I0501 01:07:29.499888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.504990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jnvfn" condition "Approved" to 2026-05-01 01:07:29.504972834 +0000 UTC m=+488.106784901 I0501 01:07:29.529273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jnvfn" condition "Ready" to 2026-05-01 01:07:29.52925746 +0000 UTC m=+488.131069517 I0501 01:07:29.565310 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:29.565293978 +0000 UTC m=+488.167106035 I0501 01:07:29.586553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.586983 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:29.586973773 +0000 UTC m=+488.188785860 I0501 01:07:29.590171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.597355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.615840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.629098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pqr94" condition "Approved" to 2026-05-01 01:07:29.629078542 +0000 UTC m=+488.230890619 I0501 01:07:29.646911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:29.662356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pqr94" condition "Ready" to 2026-05-01 01:07:29.662344402 +0000 UTC m=+488.264156449 I0501 01:07:29.826816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-phdp7" condition "Approved" to 2026-05-01 01:07:29.826790914 +0000 UTC m=+488.428603001 I0501 01:07:29.871537 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:29.871523187 +0000 UTC m=+488.473335244 I0501 01:07:30.182173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-phdp7" condition "Ready" to 2026-05-01 01:07:30.182162505 +0000 UTC m=+488.783974552 I0501 01:07:30.322340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:30.322855 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:30.322845986 +0000 UTC m=+488.924658073 I0501 01:07:30.763350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:30.767584 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:30.767568657 +0000 UTC m=+489.369380714 I0501 01:07:30.872926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:30.873290 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:30.873281205 +0000 UTC m=+489.475093262 I0501 01:07:31.075120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:37.488306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" condition "Ready" to 2026-05-01 01:07:37.488288518 +0000 UTC m=+496.090100575 I0501 01:07:37.488326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:07:37.488355 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" condition "Issuing" to 2026-05-01 01:07:37.48834782 +0000 UTC m=+496.090159867 I0501 01:07:37.503385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:37.503504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:07:37.503537 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" condition "Issuing" to 2026-05-01 01:07:37.503526969 +0000 UTC m=+496.105339056 I0501 01:07:37.705046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2z5rl-jcpm6" condition "Approved" to 2026-05-01 01:07:37.705025671 +0000 UTC m=+496.306837748 I0501 01:07:37.728682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2z5rl-jcpm6" condition "Ready" to 2026-05-01 01:07:37.728668238 +0000 UTC m=+496.330480295 I0501 01:07:37.765199 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:37.765060307 +0000 UTC m=+496.366872384 I0501 01:07:37.786773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:37.787365 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:37.787352151 +0000 UTC m=+496.389164238 I0501 01:07:37.809420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:07:37.809772 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2z5rl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:07:37.809764548 +0000 UTC m=+496.411576615 I0501 01:08:01.715668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:08:01.715715 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-01 01:08:01.715703631 +0000 UTC m=+520.317515718 I0501 01:08:01.716302 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-01 01:08:01.7162935 +0000 UTC m=+520.318105577 I0501 01:08:01.774376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:08:01.774465 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-01 01:08:01.774454816 +0000 UTC m=+520.376266893 I0501 01:08:01.953268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:08:01.985259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ttzl4" condition "Approved" to 2026-05-01 01:08:01.985245232 +0000 UTC m=+520.587057279 I0501 01:08:02.004413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ttzl4" condition "Ready" to 2026-05-01 01:08:02.004402937 +0000 UTC m=+520.606214974 I0501 01:08:02.042477 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:08:02.042458678 +0000 UTC m=+520.644270765 I0501 01:08:02.063440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:08:02.063880 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:08:02.063872914 +0000 UTC m=+520.665684971 I0501 01:08:02.126189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:11:34.433747 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-01 01:11:34.433706589 +0000 UTC m=+733.035518686 I0501 01:11:34.434175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:11:34.434311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-01 01:11:34.434298337 +0000 UTC m=+733.036110414 I0501 01:11:34.451601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:11:34.451679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:11:34.451709 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-01 01:11:34.451701756 +0000 UTC m=+733.053513813 I0501 01:11:34.830428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w989k" condition "Approved" to 2026-05-01 01:11:34.830415338 +0000 UTC m=+733.432227385 I0501 01:11:34.848905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w989k" condition "Ready" to 2026-05-01 01:11:34.848893531 +0000 UTC m=+733.450705588 I0501 01:11:34.883798 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:11:34.883779991 +0000 UTC m=+733.485592068 I0501 01:11:34.906055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:11:34.906661 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:11:34.906647482 +0000 UTC m=+733.508459569 I0501 01:11:34.929609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:11:34.929983 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:11:34.929974158 +0000 UTC m=+733.531786205 I0501 01:11:34.930437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:14:08.688984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:14:08.688963 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-01 01:14:08.688908095 +0000 UTC m=+887.290720182 I0501 01:14:08.689208 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-01 01:14:08.689196294 +0000 UTC m=+887.291008381 I0501 01:14:08.706941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:14:08.707006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:14:08.707032 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-01 01:14:08.707025677 +0000 UTC m=+887.308837734 I0501 01:14:08.986392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:14:09.000629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mm2jw" condition "Approved" to 2026-05-01 01:14:09.000619947 +0000 UTC m=+887.602432004 I0501 01:14:09.018014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mm2jw" condition "Ready" to 2026-05-01 01:14:09.017995436 +0000 UTC m=+887.619807533 I0501 01:14:09.055492 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:14:09.055481058 +0000 UTC m=+887.657293105 I0501 01:14:09.077469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:14:09.077712 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:14:09.077706489 +0000 UTC m=+887.679518536 I0501 01:14:09.105909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:15:22.820415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:15:22.820484 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-01 01:15:22.82047647 +0000 UTC m=+961.422288527 I0501 01:15:22.820498 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-01 01:15:22.820482741 +0000 UTC m=+961.422294828 I0501 01:15:22.840476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:15:22.840570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:15:22.840595 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-01 01:15:22.840587285 +0000 UTC m=+961.442399362 I0501 01:15:23.008565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:15:23.021947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9pdnd" condition "Approved" to 2026-05-01 01:15:23.021935486 +0000 UTC m=+961.623747543 I0501 01:15:23.044350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9pdnd" condition "Ready" to 2026-05-01 01:15:23.044338093 +0000 UTC m=+961.646150150 I0501 01:15:23.068927 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:15:23.068912828 +0000 UTC m=+961.670724885 I0501 01:15:23.089531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:15:23.089766 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:15:23.089759265 +0000 UTC m=+961.691571322 I0501 01:15:23.103814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:15:23.109460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:18:40.276354 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-01 01:18:40.276292159 +0000 UTC m=+1158.878104316 I0501 01:18:40.276818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:18:40.276927 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-01 01:18:40.276916539 +0000 UTC m=+1158.878728586 I0501 01:18:40.296185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:18:40.296310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:18:40.296354 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-01 01:18:40.296344992 +0000 UTC m=+1158.898157059 I0501 01:18:40.642410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-swdml" condition "Approved" to 2026-05-01 01:18:40.642374517 +0000 UTC m=+1159.244186574 I0501 01:18:40.657500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-swdml" condition "Ready" to 2026-05-01 01:18:40.657490285 +0000 UTC m=+1159.259302332 I0501 01:18:40.686031 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:18:40.686009125 +0000 UTC m=+1159.287821192 I0501 01:18:40.705304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:18:40.705764 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:18:40.705757849 +0000 UTC m=+1159.307569916 I0501 01:18:40.708939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:18:40.725615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:26:37.376727 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-01 01:26:37.376702313 +0000 UTC m=+1635.978514360 I0501 01:26:37.377472 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:26:37.377517 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-01 01:26:37.377508278 +0000 UTC m=+1635.979320365 I0501 01:26:37.392921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:26:37.392990 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-01 01:26:37.392984887 +0000 UTC m=+1635.994796944 I0501 01:26:37.539226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:26:37.584496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-x4cxv" condition "Approved" to 2026-05-01 01:26:37.584485341 +0000 UTC m=+1636.186297398 I0501 01:26:37.603905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-x4cxv" condition "Ready" to 2026-05-01 01:26:37.603889624 +0000 UTC m=+1636.205701681 I0501 01:26:37.636750 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:26:37.636737831 +0000 UTC m=+1636.238549888 I0501 01:26:37.657593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:28:19.594980 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0501 01:28:19.595031 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-01 01:28:19.595025923 +0000 UTC m=+1738.196837970 I0501 01:28:19.595099 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-01 01:28:19.595078834 +0000 UTC m=+1738.196890922 I0501 01:28:19.614453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:28:19.614562 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-01 01:28:19.614553259 +0000 UTC m=+1738.216365316 I0501 01:28:19.704682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:28:19.732503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-6ct5v" condition "Approved" to 2026-05-01 01:28:19.732485731 +0000 UTC m=+1738.334297818 I0501 01:28:19.749840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-6ct5v" condition "Ready" to 2026-05-01 01:28:19.749830859 +0000 UTC m=+1738.351642906 I0501 01:28:19.781270 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:28:19.78125542 +0000 UTC m=+1738.383067477 I0501 01:28:19.802662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:28:19.802965 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:28:19.802958156 +0000 UTC m=+1738.404770213 I0501 01:28:19.805487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:28:19.821849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:28:19.826013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0501 01:28:19.826417 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-01 01:28:19.826408005 +0000 UTC m=+1738.428220072