I0402 22:33:47.354376 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 22:33:47.354520 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 22:33:47.354602 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 22:33:47.358097 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 22:33:47.358497 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 22:33:47.358610 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 22:33:47.358680 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 22:33:47.361042 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 22:33:47.378084 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 22:33:47.378356 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 22:33:47.387248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 22:33:47.390365 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 22:33:47.393208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 22:33:47.395813 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 22:33:47.395871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 22:33:47.398545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 22:33:47.401957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 22:33:47.407229 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 22:33:47.407325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 22:33:47.411483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 22:33:47.414756 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 22:33:47.417041 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 22:33:47.417065 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 22:33:47.417180 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 22:33:47.419270 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 22:33:47.421166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 22:33:47.423126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 22:33:47.426497 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 22:33:47.426632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 22:33:47.432981 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 22:33:47.437323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 22:33:47.439315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 22:33:47.441808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 22:33:47.444838 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.445417 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.446263 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.446993 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.467732 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.510559 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.510644 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.521618 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.538663 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:47.543001 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 22:33:59.682824 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 22:33:59.682794309 +0000 UTC m=+12.361966578 I0402 22:34:00.419465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:34:00.419549 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 22:34:00.419539407 +0000 UTC m=+13.098711706 I0402 22:34:00.419700 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 22:34:00.41968105 +0000 UTC m=+13.098853329 E0402 22:34:00.444500 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 22:34:00.444608 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 22:34:00.4446001 +0000 UTC m=+13.123772379 E0402 22:34:00.444649 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 22:34:00.448776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:34:00.448882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:34:00.448915 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 22:34:00.448903056 +0000 UTC m=+13.128075355 E0402 22:34:00.455688 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 22:34:00.456070 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 22:34:00.456191 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 22:34:00.456326 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 22:34:00.518157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:34:00.521688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-q2ssk" condition "Approved" to 2026-04-02 22:34:00.521661751 +0000 UTC m=+13.200834030 I0402 22:34:00.543530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-q2ssk" condition "Ready" to 2026-04-02 22:34:00.543514812 +0000 UTC m=+13.222687121 I0402 22:34:00.570525 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:34:00.570507548 +0000 UTC m=+13.249679827 I0402 22:34:00.588684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:34:05.457782 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:34:05.457770942 +0000 UTC m=+18.136943211 I0402 22:34:27.270820 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 22:34:27.270797793 +0000 UTC m=+39.949970052 I0402 22:34:27.271089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:34:27.271244 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 22:34:27.271224712 +0000 UTC m=+39.950397031 I0402 22:34:27.286433 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 22:34:27.286417243 +0000 UTC m=+39.965589522 I0402 22:34:27.297345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:34:27.297424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:34:27.297450 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 22:34:27.297443181 +0000 UTC m=+39.976615460 I0402 22:34:27.512563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:34:27.521762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v2p8p" condition "Approved" to 2026-04-02 22:34:27.521753179 +0000 UTC m=+40.200925458 I0402 22:34:27.554132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v2p8p" condition "Ready" to 2026-04-02 22:34:27.554115997 +0000 UTC m=+40.233288276 I0402 22:34:27.588979 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:34:27.588961499 +0000 UTC m=+40.268133768 I0402 22:34:27.616816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:34:27.617350 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:34:27.617339956 +0000 UTC m=+40.296512245 I0402 22:34:27.627098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:34:27.644838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:36:12.626284 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-02 22:36:12.626230065 +0000 UTC m=+145.305402374 I0402 22:36:12.627044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:36:12.627075 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 22:36:12.627068453 +0000 UTC m=+145.306240752 E0402 22:36:12.641432 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 22:36:12.641503 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-02 22:36:12.64147502 +0000 UTC m=+145.320647299 I0402 22:36:12.641546 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 22:36:12.644141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:36:12.644210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:36:12.644232 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 22:36:12.644225673 +0000 UTC m=+145.323397952 E0402 22:36:12.650537 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0402 22:36:12.650759 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 22:36:12.650848 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 22:36:12.650992 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0402 22:36:12.658460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:36:12.658492 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-02 22:36:12.658485215 +0000 UTC m=+145.337657494 I0402 22:36:12.658737 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 22:36:12.658731181 +0000 UTC m=+145.337903460 I0402 22:36:12.674507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:36:12.674656 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 22:36:12.67464857 +0000 UTC m=+145.353820849 I0402 22:36:12.839447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fbxk4" condition "Approved" to 2026-04-02 22:36:12.839436951 +0000 UTC m=+145.518609230 I0402 22:36:12.878642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fbxk4" condition "Ready" to 2026-04-02 22:36:12.878625968 +0000 UTC m=+145.557798267 I0402 22:36:12.881287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:36:12.906935 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:36:12.906917648 +0000 UTC m=+145.586089957 I0402 22:36:12.921366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ffxp9" condition "Approved" to 2026-04-02 22:36:12.921350075 +0000 UTC m=+145.600522384 I0402 22:36:12.928719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:36:12.929234 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:36:12.929226613 +0000 UTC m=+145.608398882 I0402 22:36:12.942642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ffxp9" condition "Ready" to 2026-04-02 22:36:12.942629007 +0000 UTC m=+145.621801286 I0402 22:36:12.951282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:36:17.651280 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:36:17.651265191 +0000 UTC m=+150.330437490 I0402 22:36:17.671279 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-ffxp9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:36:17.671261934 +0000 UTC m=+150.350434203 I0402 22:36:17.704680 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:36:17.70466412 +0000 UTC m=+150.383836419 I0402 22:36:17.730761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:36:17.731490 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:36:17.731482267 +0000 UTC m=+150.410654546 I0402 22:36:17.750451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:36:17.750829 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:36:17.750818374 +0000 UTC m=+150.429990663 I0402 22:36:17.754408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:39:11.123886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:39:11.123957 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-04-02 22:39:11.123936264 +0000 UTC m=+323.803108563 I0402 22:39:11.123957 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-04-02 22:39:11.123943004 +0000 UTC m=+323.803115303 I0402 22:39:11.148800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:39:11.148900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:39:11.148928 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-04-02 22:39:11.14891779 +0000 UTC m=+323.828090099 I0402 22:39:11.307047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:39:11.319283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-gjq7b" condition "Approved" to 2026-04-02 22:39:11.318850861 +0000 UTC m=+323.998023140 I0402 22:39:11.341063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-gjq7b" condition "Ready" to 2026-04-02 22:39:11.341044805 +0000 UTC m=+324.020217114 I0402 22:39:11.386490 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:39:11.386470234 +0000 UTC m=+324.065642533 I0402 22:39:11.408264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:39:11.408515 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:39:11.408508943 +0000 UTC m=+324.087681222 I0402 22:39:11.419543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:39:11.429398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:40:25.263660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:40:25.263754 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 22:40:25.263742632 +0000 UTC m=+397.942914931 I0402 22:40:25.263752 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 22:40:25.263597648 +0000 UTC m=+397.942769947 E0402 22:40:25.277333 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 22:40:25.277420 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 22:40:25.27737548 +0000 UTC m=+397.956547759 E0402 22:40:25.277573 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 22:40:25.279792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:40:25.279880 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 22:40:25.279872156 +0000 UTC m=+397.959044435 E0402 22:40:25.289168 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 22:40:25.289233 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 22:40:25.289254 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 22:40:25.289288 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 22:40:25.297321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:40:25.322597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mgnvd" condition "Approved" to 2026-04-02 22:40:25.322578262 +0000 UTC m=+398.001750571 I0402 22:40:25.347167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mgnvd" condition "Ready" to 2026-04-02 22:40:25.347151217 +0000 UTC m=+398.026323506 I0402 22:40:25.393287 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:40:25.39326751 +0000 UTC m=+398.072439789 I0402 22:40:25.414295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:40:25.414540 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:40:25.4145341 +0000 UTC m=+398.093706379 I0402 22:40:25.434895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:40:30.289863 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:40:30.289847929 +0000 UTC m=+402.969020218 I0402 22:41:11.039280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:41:11.048422 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 22:41:11.04840134 +0000 UTC m=+443.727573619 I0402 22:41:11.040003 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 22:41:11.03998615 +0000 UTC m=+443.719158429 I0402 22:41:11.052740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:41:11.052822 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 22:41:11.052769989 +0000 UTC m=+443.731942258 I0402 22:41:11.053189 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 22:41:11.053184438 +0000 UTC m=+443.732356707 I0402 22:41:11.053663 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 22:41:11.053651878 +0000 UTC m=+443.732824137 I0402 22:41:11.054378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:41:11.054395 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 22:41:11.054391155 +0000 UTC m=+443.733563424 I0402 22:41:11.077303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.077428 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 22:41:11.077420736 +0000 UTC m=+443.756593005 I0402 22:41:11.093590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.093665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:41:11.093696 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 22:41:11.093686182 +0000 UTC m=+443.772858461 I0402 22:41:11.095382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.095744 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 22:41:11.095729509 +0000 UTC m=+443.774901788 I0402 22:41:11.175572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.211624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5x2m9" condition "Approved" to 2026-04-02 22:41:11.211614646 +0000 UTC m=+443.890786915 I0402 22:41:11.247403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5x2m9" condition "Ready" to 2026-04-02 22:41:11.247394504 +0000 UTC m=+443.926566783 I0402 22:41:11.277735 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:11.277716599 +0000 UTC m=+443.956888898 I0402 22:41:11.308682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.309092 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:11.309081127 +0000 UTC m=+443.988253406 I0402 22:41:11.319259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.354848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.374332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pm4h4" condition "Approved" to 2026-04-02 22:41:11.37430622 +0000 UTC m=+444.053478529 I0402 22:41:11.404132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pm4h4" condition "Ready" to 2026-04-02 22:41:11.404117683 +0000 UTC m=+444.083289962 I0402 22:41:11.435790 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:11.435777429 +0000 UTC m=+444.114949698 I0402 22:41:11.484965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.785123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:11.994164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:12.043659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s2xl4" condition "Approved" to 2026-04-02 22:41:12.043639577 +0000 UTC m=+444.722811856 I0402 22:41:12.143122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s2xl4" condition "Ready" to 2026-04-02 22:41:12.143108453 +0000 UTC m=+444.822280732 I0402 22:41:12.589691 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:12.589652137 +0000 UTC m=+445.268824436 I0402 22:41:12.689627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:12.690311 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:12.69029865 +0000 UTC m=+445.369470949 I0402 22:41:12.935336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:12.986627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:13.084039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:18.911152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:41:18.911218 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" condition "Issuing" to 2026-04-02 22:41:18.911201112 +0000 UTC m=+451.590373451 I0402 22:41:18.911205 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" condition "Ready" to 2026-04-02 22:41:18.911158571 +0000 UTC m=+451.590330870 I0402 22:41:18.929456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ldchf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:18.929646 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" condition "Ready" to 2026-04-02 22:41:18.929632848 +0000 UTC m=+451.608805157 I0402 22:41:18.992686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ldchf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:19.034561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ldchf-sdr5g" condition "Approved" to 2026-04-02 22:41:19.034543957 +0000 UTC m=+451.713716246 I0402 22:41:19.053884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ldchf-sdr5g" condition "Ready" to 2026-04-02 22:41:19.053868634 +0000 UTC m=+451.733040913 I0402 22:41:19.084633 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:19.084615438 +0000 UTC m=+451.763787717 I0402 22:41:19.107585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ldchf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:19.108025 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:19.108014036 +0000 UTC m=+451.787186345 I0402 22:41:19.135223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ldchf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ldchf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:53.038596 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 22:41:53.038023673 +0000 UTC m=+485.717195972 I0402 22:41:53.038904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:41:53.039033 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 22:41:53.039022517 +0000 UTC m=+485.718194816 I0402 22:41:53.060231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:53.060324 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 22:41:53.060317777 +0000 UTC m=+485.739490056 I0402 22:41:53.262767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:53.294381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gqmkb" condition "Approved" to 2026-04-02 22:41:53.294370833 +0000 UTC m=+485.973543112 I0402 22:41:53.316804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gqmkb" condition "Ready" to 2026-04-02 22:41:53.316789159 +0000 UTC m=+485.995961448 I0402 22:41:53.351693 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:53.351675667 +0000 UTC m=+486.030847946 I0402 22:41:53.375221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:53.375606 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:53.375598508 +0000 UTC m=+486.054770787 I0402 22:41:53.396300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:41:53.396815 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:41:53.396783825 +0000 UTC m=+486.075956104 I0402 22:45:10.793894 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 22:45:10.793840433 +0000 UTC m=+683.473012742 I0402 22:45:10.793948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:45:10.793999 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 22:45:10.793993447 +0000 UTC m=+683.473165716 I0402 22:45:10.813825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:45:10.813939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:45:10.813963 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 22:45:10.813956367 +0000 UTC m=+683.493128646 I0402 22:45:11.000301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-c88h7" condition "Approved" to 2026-04-02 22:45:11.000285383 +0000 UTC m=+683.679457672 I0402 22:45:11.021773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-c88h7" condition "Ready" to 2026-04-02 22:45:11.021749288 +0000 UTC m=+683.700921597 I0402 22:45:11.061352 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:45:11.061341492 +0000 UTC m=+683.740513781 I0402 22:45:11.087855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:45:11.088286 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:45:11.08827947 +0000 UTC m=+683.767451739 I0402 22:45:11.097358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:45:11.109607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:45:11.109901 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:45:11.109891518 +0000 UTC m=+683.789063797 I0402 22:47:41.160228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:47:41.160405 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 22:47:41.160386864 +0000 UTC m=+833.839559163 I0402 22:47:41.160301 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 22:47:41.160284102 +0000 UTC m=+833.839456401 I0402 22:47:41.177007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:47:41.177077 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 22:47:41.17706789 +0000 UTC m=+833.856240169 I0402 22:47:41.320392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:47:41.354458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rwt62" condition "Approved" to 2026-04-02 22:47:41.354444402 +0000 UTC m=+834.033616682 I0402 22:47:41.382739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rwt62" condition "Ready" to 2026-04-02 22:47:41.38272425 +0000 UTC m=+834.061896559 I0402 22:47:41.420890 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:47:41.420872452 +0000 UTC m=+834.100044751 I0402 22:47:41.449945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:47:41.450435 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:47:41.450426968 +0000 UTC m=+834.129599247 I0402 22:47:41.453304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:47:41.467976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:47:41.469678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:47:41.469938 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:47:41.469929978 +0000 UTC m=+834.149102247 I0402 22:48:47.524952 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 22:48:47.524936287 +0000 UTC m=+900.204108566 I0402 22:48:47.524990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:48:47.525041 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 22:48:47.525026899 +0000 UTC m=+900.204199208 I0402 22:48:47.541138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:48:47.541354 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 22:48:47.541342826 +0000 UTC m=+900.220515105 I0402 22:48:47.703319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:48:47.747674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4zhdl" condition "Approved" to 2026-04-02 22:48:47.74766082 +0000 UTC m=+900.426833129 I0402 22:48:47.768081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4zhdl" condition "Ready" to 2026-04-02 22:48:47.76806985 +0000 UTC m=+900.447242129 I0402 22:48:47.799224 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:48:47.799215201 +0000 UTC m=+900.478387470 I0402 22:48:47.816816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:48:47.817094 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:48:47.817086273 +0000 UTC m=+900.496258552 I0402 22:48:47.837493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:48:47.845655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:51:49.860081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:51:49.860518 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 22:51:49.860193157 +0000 UTC m=+1082.539365466 I0402 22:51:49.860656 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 22:51:49.85989647 +0000 UTC m=+1082.539068769 I0402 22:51:49.880799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:51:49.880883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 22:51:49.880911 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 22:51:49.880901953 +0000 UTC m=+1082.560074232 I0402 22:51:50.095041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2xwk8" condition "Approved" to 2026-04-02 22:51:50.095010702 +0000 UTC m=+1082.774183001 I0402 22:51:50.113042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2xwk8" condition "Ready" to 2026-04-02 22:51:50.113023428 +0000 UTC m=+1082.792195707 I0402 22:51:50.143831 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:51:50.143814581 +0000 UTC m=+1082.822986860 I0402 22:51:50.166172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:51:50.166537 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 22:51:50.166528603 +0000 UTC m=+1082.845700892 I0402 22:51:50.186376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 22:51:50.187070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"