I0420 08:13:01.960978 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 08:13:01.961126 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 08:13:01.961242 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 08:13:01.968676 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 08:13:01.969110 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 08:13:01.969227 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 08:13:01.969347 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 08:13:01.972209 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 08:13:01.990889 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 08:13:01.991221 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 08:13:01.996516 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 08:13:01.999248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 08:13:02.002303 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 08:13:02.002489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 08:13:02.007157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 08:13:02.010426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 08:13:02.014836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 08:13:02.019550 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 08:13:02.024177 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 08:13:02.024220 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 08:13:02.024419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 08:13:02.026551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 08:13:02.028506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 08:13:02.034224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 08:13:02.036267 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 08:13:02.036294 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 08:13:02.036365 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 08:13:02.038381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 08:13:02.040733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 08:13:02.042711 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 08:13:02.044741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 08:13:02.046702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 08:13:02.049261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 08:13:02.053188 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.053923 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.054365 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.056180 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.057657 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.057742 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.058266 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.058541 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.058630 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:02.144419 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:14.752472 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 08:13:14.75245343 +0000 UTC m=+12.824426866 I0420 08:13:15.474581 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:13:15.474560094 +0000 UTC m=+13.546533530 I0420 08:13:15.474791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:15.474883 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 08:13:15.474865541 +0000 UTC m=+13.546838987 E0420 08:13:15.492254 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:13:15.492437 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 08:13:15.492365808 +0000 UTC m=+13.564339234 E0420 08:13:15.492561 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:13:15.495129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:15.495233 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:15.495273 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 08:13:15.495265072 +0000 UTC m=+13.567238518 E0420 08:13:15.508673 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 08:13:15.508808 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:13:15.508860 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:13:15.508945 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 08:13:15.544026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:15.549013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f5hl7" condition "Approved" to 2026-04-20 08:13:15.548998597 +0000 UTC m=+13.620972013 I0420 08:13:15.560433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f5hl7" condition "Ready" to 2026-04-20 08:13:15.560418419 +0000 UTC m=+13.632391835 I0420 08:13:15.580987 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:15.580962812 +0000 UTC m=+13.652936238 I0420 08:13:15.599026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:15.599296 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:15.599287077 +0000 UTC m=+13.671260493 I0420 08:13:15.613432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:15.613676 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:15.613666344 +0000 UTC m=+13.685639750 I0420 08:13:15.614739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:20.509323 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:20.509307797 +0000 UTC m=+18.581281233 I0420 08:13:41.384844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:41.384998 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 08:13:41.384985921 +0000 UTC m=+39.456959347 I0420 08:13:41.384850 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 08:13:41.384827828 +0000 UTC m=+39.456801274 I0420 08:13:41.396239 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 08:13:41.395779865 +0000 UTC m=+39.467753281 I0420 08:13:41.409885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:41.413650 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 08:13:41.413587881 +0000 UTC m=+39.485561307 I0420 08:13:41.487425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:41.538555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5dqc5" condition "Approved" to 2026-04-20 08:13:41.538540208 +0000 UTC m=+39.610513624 I0420 08:13:41.570871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5dqc5" condition "Ready" to 2026-04-20 08:13:41.570857378 +0000 UTC m=+39.642830794 I0420 08:13:41.604158 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:41.60414258 +0000 UTC m=+39.676116016 I0420 08:13:41.626875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:41.627360 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:41.627350742 +0000 UTC m=+39.699324168 I0420 08:13:41.657698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:15:23.729235 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:15:23.729970 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 08:15:23.729574123 +0000 UTC m=+141.801547589 I0420 08:15:23.730034 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 08:15:23.729280466 +0000 UTC m=+141.801253902 E0420 08:15:23.746429 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 08:15:23.746475 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 08:15:23.746469076 +0000 UTC m=+141.818442482 I0420 08:15:23.746510 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 08:15:23.748470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:15:23.748529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:15:23.748544 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 08:15:23.748539211 +0000 UTC m=+141.820512627 E0420 08:15:23.755919 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 08:15:23.756006 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 08:15:23.756086 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 08:15:23.756171 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 08:15:23.759699 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 08:15:23.759690611 +0000 UTC m=+141.831664027 I0420 08:15:23.759936 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:15:23.759975 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 08:15:23.759970527 +0000 UTC m=+141.831943933 I0420 08:15:23.774042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:15:23.774144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:15:23.774164 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 08:15:23.774157953 +0000 UTC m=+141.846131369 I0420 08:15:24.022330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-42l7q" condition "Approved" to 2026-04-20 08:15:24.022319799 +0000 UTC m=+142.094293225 I0420 08:15:24.049266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-42l7q" condition "Ready" to 2026-04-20 08:15:24.049252758 +0000 UTC m=+142.121226204 I0420 08:15:24.356577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:15:24.362855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-m4fnt" condition "Approved" to 2026-04-20 08:15:24.362840053 +0000 UTC m=+142.434813489 I0420 08:15:24.389300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-m4fnt" condition "Ready" to 2026-04-20 08:15:24.389285993 +0000 UTC m=+142.461259409 I0420 08:15:24.418065 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:15:24.418047063 +0000 UTC m=+142.490020509 I0420 08:15:24.435399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:15:28.757127 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:15:28.757114079 +0000 UTC m=+146.829087525 I0420 08:15:28.775346 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-42l7q" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:15:28.775335041 +0000 UTC m=+146.847308457 I0420 08:15:28.799880 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:15:28.799868039 +0000 UTC m=+146.871841455 I0420 08:15:28.818985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:18:11.530642 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready" to 2026-04-20 08:18:11.530593905 +0000 UTC m=+309.602567351 I0420 08:18:11.530686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-250.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:18:11.530764 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Issuing" to 2026-04-20 08:18:11.530754888 +0000 UTC m=+309.602728314 I0420 08:18:11.550115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:18:11.550181 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready" to 2026-04-20 08:18:11.550174497 +0000 UTC m=+309.622147903 I0420 08:18:11.823476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:18:11.855822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-250.nip.io-tls-82zzd" condition "Approved" to 2026-04-20 08:18:11.855804932 +0000 UTC m=+309.927778368 I0420 08:18:11.888474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-250.nip.io-tls-82zzd" condition "Ready" to 2026-04-20 08:18:11.888456785 +0000 UTC m=+309.960430221 I0420 08:18:11.914117 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:18:11.914074588 +0000 UTC m=+309.986048004 I0420 08:18:11.934928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:18:11.935373 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:18:11.935363905 +0000 UTC m=+310.007337351 I0420 08:18:11.953857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:18:11.956125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:18:11.956374 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:18:11.956366629 +0000 UTC m=+310.028340045 I0420 08:19:24.203299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:19:24.203344 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 08:19:24.203332364 +0000 UTC m=+382.275305780 I0420 08:19:24.204005 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 08:19:24.203998028 +0000 UTC m=+382.275971444 I0420 08:19:24.217122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:19:24.217248 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 08:19:24.217239724 +0000 UTC m=+382.289213130 E0420 08:19:24.218836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:19:24.218887 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 08:19:24.218875228 +0000 UTC m=+382.290848644 E0420 08:19:24.218943 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:19:24.231562 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 08:19:24.231696 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:19:24.231885 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:19:24.231936 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 08:19:24.235400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:19:24.263596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sdnj4" condition "Approved" to 2026-04-20 08:19:24.263583021 +0000 UTC m=+382.335556427 I0420 08:19:24.276318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-sdnj4" condition "Ready" to 2026-04-20 08:19:24.276305875 +0000 UTC m=+382.348279291 I0420 08:19:24.300209 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:19:24.300195219 +0000 UTC m=+382.372168625 I0420 08:19:24.317124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:19:24.317410 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:19:24.317402289 +0000 UTC m=+382.389375715 I0420 08:19:24.332658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:19:24.332899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:19:29.233046 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:19:29.233031556 +0000 UTC m=+387.305005002 I0420 08:20:06.943488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:06.943561 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 08:20:06.943552319 +0000 UTC m=+425.015525735 I0420 08:20:06.943716 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 08:20:06.943711682 +0000 UTC m=+425.015685088 I0420 08:20:06.944034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:06.944058 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 08:20:06.94405369 +0000 UTC m=+425.016027106 I0420 08:20:06.944256 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 08:20:06.944251844 +0000 UTC m=+425.016225250 I0420 08:20:06.948297 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:06.948342 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 08:20:06.948331561 +0000 UTC m=+425.020304977 I0420 08:20:06.948654 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 08:20:06.948648758 +0000 UTC m=+425.020622174 I0420 08:20:06.971138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:06.971194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:06.971214 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 08:20:06.971209043 +0000 UTC m=+425.043182449 I0420 08:20:06.974940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:06.975018 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 08:20:06.975011236 +0000 UTC m=+425.046984652 I0420 08:20:06.981423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:06.984005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:06.984046 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 08:20:06.98403885 +0000 UTC m=+425.056012256 I0420 08:20:07.125780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:07.156226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ltrfd" condition "Approved" to 2026-04-20 08:20:07.156200425 +0000 UTC m=+425.228173861 I0420 08:20:07.169275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:07.177450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ltrfd" condition "Ready" to 2026-04-20 08:20:07.177441592 +0000 UTC m=+425.249414998 I0420 08:20:07.206960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tpt5z" condition "Approved" to 2026-04-20 08:20:07.206949268 +0000 UTC m=+425.278922684 I0420 08:20:07.207404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vnz6r" condition "Approved" to 2026-04-20 08:20:07.207388887 +0000 UTC m=+425.279362313 I0420 08:20:07.222416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:07.222458 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 08:20:07.222450381 +0000 UTC m=+425.294423787 I0420 08:20:07.223352 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:07.22334375 +0000 UTC m=+425.295317146 I0420 08:20:07.223885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vnz6r" condition "Ready" to 2026-04-20 08:20:07.223880342 +0000 UTC m=+425.295853738 I0420 08:20:07.225776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tpt5z" condition "Ready" to 2026-04-20 08:20:07.225772062 +0000 UTC m=+425.297745468 I0420 08:20:07.518462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:07.518865 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:07.518853351 +0000 UTC m=+425.590826747 I0420 08:20:07.775747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5dpvj" condition "Approved" to 2026-04-20 08:20:07.77573648 +0000 UTC m=+425.847709896 I0420 08:20:07.821180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:07.971262 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:07.971239558 +0000 UTC m=+426.043213004 I0420 08:20:08.110339 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:08.110326101 +0000 UTC m=+426.182299517 I0420 08:20:08.180353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5dpvj" condition "Ready" to 2026-04-20 08:20:08.180338348 +0000 UTC m=+426.252311784 I0420 08:20:08.571956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:08.572759 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:08.572750594 +0000 UTC m=+426.644724030 I0420 08:20:08.672777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:08.673575 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:08.673560894 +0000 UTC m=+426.745534350 E0420 08:20:08.866750 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-48xnv\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0420 08:20:09.472241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:09.521125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:09.571783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:09.623824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:09.719827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:10.073828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:10.118676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:14.840438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:14.840492 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" condition "Issuing" to 2026-04-20 08:20:14.840481419 +0000 UTC m=+432.912454845 I0420 08:20:14.840586 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" condition "Ready" to 2026-04-20 08:20:14.840558461 +0000 UTC m=+432.912531897 I0420 08:20:14.860790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:14.860907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:14.860938 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" condition "Issuing" to 2026-04-20 08:20:14.860928479 +0000 UTC m=+432.932901895 I0420 08:20:15.122877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x2gvb-phnzm" condition "Approved" to 2026-04-20 08:20:15.122860766 +0000 UTC m=+433.194834182 I0420 08:20:15.146744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x2gvb-phnzm" condition "Ready" to 2026-04-20 08:20:15.14672782 +0000 UTC m=+433.218701236 I0420 08:20:15.183753 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:15.183733166 +0000 UTC m=+433.255706602 I0420 08:20:15.203664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:15.204105 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:15.204093345 +0000 UTC m=+433.276066761 I0420 08:20:15.232642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x2gvb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:33.929411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:33.929500 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 08:20:33.929458612 +0000 UTC m=+452.001432038 I0420 08:20:33.929495 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 08:20:33.929450402 +0000 UTC m=+452.001423838 I0420 08:20:33.950263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:33.950481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:20:33.950513 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 08:20:33.950500804 +0000 UTC m=+452.022474210 I0420 08:20:34.504404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:34.510428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-x5wtf" condition "Approved" to 2026-04-20 08:20:34.510417856 +0000 UTC m=+452.582391262 I0420 08:20:34.530846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-x5wtf" condition "Ready" to 2026-04-20 08:20:34.530828495 +0000 UTC m=+452.602801901 I0420 08:20:34.567813 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:34.567797232 +0000 UTC m=+452.639770638 I0420 08:20:34.599337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:34.599984 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:20:34.599971314 +0000 UTC m=+452.671944740 I0420 08:20:34.611321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:20:34.624310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:23:58.657727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:23:58.657946 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 08:23:58.657839648 +0000 UTC m=+656.729813434 I0420 08:23:58.658065 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 08:23:58.658043652 +0000 UTC m=+656.730017068 I0420 08:23:58.690133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:23:58.690213 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 08:23:58.690205633 +0000 UTC m=+656.762179059 I0420 08:23:59.023378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:23:59.066430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vsgnd" condition "Approved" to 2026-04-20 08:23:59.06638682 +0000 UTC m=+657.138360226 I0420 08:23:59.089686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vsgnd" condition "Ready" to 2026-04-20 08:23:59.08967356 +0000 UTC m=+657.161646966 I0420 08:23:59.133354 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:23:59.133307247 +0000 UTC m=+657.205280693 I0420 08:23:59.160545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:23:59.161166 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:23:59.161159265 +0000 UTC m=+657.233132691 I0420 08:23:59.191644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:26:23.702378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:26:23.702496 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 08:26:23.702454029 +0000 UTC m=+801.774427455 I0420 08:26:23.702633 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 08:26:23.702612832 +0000 UTC m=+801.774586268 I0420 08:26:23.721184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:26:23.721430 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 08:26:23.721357443 +0000 UTC m=+801.793330879 I0420 08:26:23.846896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:26:23.882707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mb9qn" condition "Approved" to 2026-04-20 08:26:23.882695179 +0000 UTC m=+801.954668575 I0420 08:26:23.901282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mb9qn" condition "Ready" to 2026-04-20 08:26:23.901267417 +0000 UTC m=+801.973240833 I0420 08:26:23.929399 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:26:23.92938395 +0000 UTC m=+802.001357366 I0420 08:26:23.953262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:26:23.953547 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:26:23.953539746 +0000 UTC m=+802.025513142 I0420 08:26:23.958317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:26:23.980519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:26:23.982566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:26:23.983095 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:26:23.98308293 +0000 UTC m=+802.055056366 I0420 08:27:24.225654 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:27:24.225745 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 08:27:24.225734557 +0000 UTC m=+862.297708003 I0420 08:27:24.225885 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 08:27:24.225864429 +0000 UTC m=+862.297837835 I0420 08:27:24.245818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:27:24.245953 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 08:27:24.24594177 +0000 UTC m=+862.317915176 I0420 08:27:24.400346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:27:24.432298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-d4294" condition "Approved" to 2026-04-20 08:27:24.43227079 +0000 UTC m=+862.504244286 I0420 08:27:24.458335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-d4294" condition "Ready" to 2026-04-20 08:27:24.458321208 +0000 UTC m=+862.530294624 I0420 08:27:24.488079 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:27:24.488064825 +0000 UTC m=+862.560038221 I0420 08:27:24.513021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:27:24.513363 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:27:24.513356627 +0000 UTC m=+862.585330033 I0420 08:27:24.535848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:27:24.536218 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:27:24.536210806 +0000 UTC m=+862.608184212 I0420 08:30:18.890430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:30:18.890598 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 08:30:18.890579722 +0000 UTC m=+1036.962553188 I0420 08:30:18.891078 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 08:30:18.891065802 +0000 UTC m=+1036.963039228 I0420 08:30:18.910839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:30:18.910940 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 08:30:18.910930199 +0000 UTC m=+1036.982903635 I0420 08:30:19.209422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:30:19.240540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-dckdv" condition "Approved" to 2026-04-20 08:30:19.24052661 +0000 UTC m=+1037.312500026 I0420 08:30:19.262618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-dckdv" condition "Ready" to 2026-04-20 08:30:19.262604464 +0000 UTC m=+1037.334577880 I0420 08:30:19.294266 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:30:19.294252502 +0000 UTC m=+1037.366225948 I0420 08:30:19.315623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:30:19.315894 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:30:19.315889705 +0000 UTC m=+1037.387863121 I0420 08:30:19.334383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"