I0419 13:32:54.565040 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0419 13:32:54.565139 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0419 13:32:54.565197 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0419 13:32:54.570814 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0419 13:32:54.571165 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0419 13:32:54.571323 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0419 13:32:54.571322 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0419 13:32:54.573393 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0419 13:32:54.585906 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0419 13:32:54.588826 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0419 13:32:54.588853 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0419 13:32:54.588862 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0419 13:32:54.588871 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0419 13:32:54.588883 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0419 13:32:54.588966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0419 13:32:54.592065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0419 13:32:54.594870 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0419 13:32:54.601203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0419 13:32:54.604724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0419 13:32:54.607951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0419 13:32:54.610605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0419 13:32:54.613406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0419 13:32:54.616211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0419 13:32:54.619423 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0419 13:32:54.625835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0419 13:32:54.628384 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0419 13:32:54.628450 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0419 13:32:54.630977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0419 13:32:54.633334 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0419 13:32:54.635754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0419 13:32:54.638043 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0419 13:32:54.640175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0419 13:32:54.642204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0419 13:32:54.644790 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.646693 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.647668 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.648679 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.648726 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.648939 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.649988 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.650206 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.651426 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:32:54.732488 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 13:33:07.833154 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-19 13:33:07.833142332 +0000 UTC m=+13.296934669 I0419 13:33:08.527360 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 13:33:08.527349753 +0000 UTC m=+13.991142100 I0419 13:33:08.527727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:08.527906 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 13:33:08.527858045 +0000 UTC m=+13.991650452 I0419 13:33:08.543896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:08.544003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:08.544039 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 13:33:08.544030354 +0000 UTC m=+14.007822721 E0419 13:33:08.544044 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:33:08.544142 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-19 13:33:08.544130527 +0000 UTC m=+14.007922904 E0419 13:33:08.544191 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:33:08.558510 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0419 13:33:08.558828 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:33:08.558971 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:33:08.559090 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0419 13:33:08.586141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:08.591542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8dwrj" condition "Approved" to 2026-04-19 13:33:08.591530917 +0000 UTC m=+14.055323284 I0419 13:33:08.603501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8dwrj" condition "Ready" to 2026-04-19 13:33:08.603462205 +0000 UTC m=+14.067254552 I0419 13:33:08.623210 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:08.623198409 +0000 UTC m=+14.086990756 I0419 13:33:08.642147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:13.559304 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:13.559294369 +0000 UTC m=+19.023086706 I0419 13:33:33.681992 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 13:33:33.681942332 +0000 UTC m=+39.145734689 I0419 13:33:33.682057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:33:33.682152 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-19 13:33:33.682143227 +0000 UTC m=+39.145935594 I0419 13:33:33.693117 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-19 13:33:33.69310011 +0000 UTC m=+39.156892457 I0419 13:33:33.707977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:33.708249 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 13:33:33.708241884 +0000 UTC m=+39.172034231 I0419 13:33:34.000177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:34.032027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dl9kw" condition "Approved" to 2026-04-19 13:33:34.032013588 +0000 UTC m=+39.495805955 I0419 13:33:34.068288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dl9kw" condition "Ready" to 2026-04-19 13:33:34.068277542 +0000 UTC m=+39.532069899 I0419 13:33:34.100157 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:34.100141038 +0000 UTC m=+39.563933405 I0419 13:33:34.119974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:33:34.120376 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:33:34.120368005 +0000 UTC m=+39.584160362 I0419 13:33:34.156260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:18.443270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:35:18.443318 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-19 13:35:18.443306891 +0000 UTC m=+143.907099268 I0419 13:35:18.443401 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-19 13:35:18.443384982 +0000 UTC m=+143.907177329 E0419 13:35:18.454353 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0419 13:35:18.454398 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-19 13:35:18.454390507 +0000 UTC m=+143.918182854 I0419 13:35:18.454436 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0419 13:35:18.459741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:18.459873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:35:18.459914 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-19 13:35:18.45990341 +0000 UTC m=+143.923695777 E0419 13:35:18.463067 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0419 13:35:18.463183 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0419 13:35:18.463224 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0419 13:35:18.463274 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0419 13:35:18.466990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:35:18.467025 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-19 13:35:18.467015342 +0000 UTC m=+143.930807679 I0419 13:35:18.467089 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-19 13:35:18.467072643 +0000 UTC m=+143.930864990 I0419 13:35:18.484833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:18.484893 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-19 13:35:18.484886452 +0000 UTC m=+143.948678789 I0419 13:35:18.651317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:18.687461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-nxt5v" condition "Approved" to 2026-04-19 13:35:18.68745237 +0000 UTC m=+144.151244707 I0419 13:35:18.705382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-nxt5v" condition "Ready" to 2026-04-19 13:35:18.705370522 +0000 UTC m=+144.169162869 I0419 13:35:18.789038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:18.795968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-vr6gz" condition "Approved" to 2026-04-19 13:35:18.795957304 +0000 UTC m=+144.259749661 I0419 13:35:18.821444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-vr6gz" condition "Ready" to 2026-04-19 13:35:18.821428407 +0000 UTC m=+144.285220774 I0419 13:35:18.847395 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:35:18.847384153 +0000 UTC m=+144.311176500 I0419 13:35:18.867293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:18.867652 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:35:18.867643861 +0000 UTC m=+144.331436208 I0419 13:35:18.870810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:18.883526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:18.883894 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:35:18.883885802 +0000 UTC m=+144.347678159 I0419 13:35:23.464128 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:35:23.46411456 +0000 UTC m=+148.927906937 I0419 13:35:23.479093 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-nxt5v" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:35:23.47908292 +0000 UTC m=+148.942875267 I0419 13:35:23.504594 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:35:23.504578254 +0000 UTC m=+148.968370641 I0419 13:35:23.521659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:35:23.521990 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:35:23.521980643 +0000 UTC m=+148.985772990 I0419 13:35:23.539655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:45.984801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:37:45.984851 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-04-19 13:37:45.984841029 +0000 UTC m=+291.448633396 I0419 13:37:45.984944 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-04-19 13:37:45.984923551 +0000 UTC m=+291.448715918 I0419 13:37:46.002527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:46.002583 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-04-19 13:37:46.002577365 +0000 UTC m=+291.466369712 I0419 13:37:46.245717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:46.274483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-td6st" condition "Approved" to 2026-04-19 13:37:46.27447223 +0000 UTC m=+291.738264557 I0419 13:37:46.290679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-td6st" condition "Ready" to 2026-04-19 13:37:46.290661949 +0000 UTC m=+291.754454326 I0419 13:37:46.314337 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:37:46.314322106 +0000 UTC m=+291.778114473 I0419 13:37:46.331143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:46.331666 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:37:46.331655734 +0000 UTC m=+291.795448101 I0419 13:37:46.350899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:37:46.357562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:38:55.739354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:38:55.739376 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 13:38:55.739356756 +0000 UTC m=+361.203149133 I0419 13:38:55.739397 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 13:38:55.739387776 +0000 UTC m=+361.203180123 E0419 13:38:55.750485 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:38:55.750537 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-19 13:38:55.750528094 +0000 UTC m=+361.214320451 E0419 13:38:55.750597 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 13:38:55.752628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:38:55.752717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 13:38:55.752708956 +0000 UTC m=+361.216501293 E0419 13:38:55.759160 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0419 13:38:55.759246 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:38:55.759273 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 13:38:55.759305 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0419 13:38:55.767521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:38:55.786570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rp42x" condition "Approved" to 2026-04-19 13:38:55.786558669 +0000 UTC m=+361.250351006 I0419 13:38:55.796765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rp42x" condition "Ready" to 2026-04-19 13:38:55.796753163 +0000 UTC m=+361.260545510 I0419 13:38:55.811801 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:38:55.811787245 +0000 UTC m=+361.275579592 I0419 13:38:55.826974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:00.759466 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:00.759450827 +0000 UTC m=+366.223243174 I0419 13:39:37.813973 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 13:39:37.813963311 +0000 UTC m=+403.277755648 I0419 13:39:37.814122 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-19 13:39:37.814108324 +0000 UTC m=+403.277900671 I0419 13:39:37.814247 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:39:37.814268 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 13:39:37.814265398 +0000 UTC m=+403.278057735 I0419 13:39:37.814471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:39:37.814485 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 13:39:37.814482113 +0000 UTC m=+403.278274450 I0419 13:39:37.815221 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 13:39:37.815215931 +0000 UTC m=+403.279008268 I0419 13:39:37.815210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:39:37.815295 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 13:39:37.815287033 +0000 UTC m=+403.279079400 I0419 13:39:37.842076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:37.842143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:39:37.842163 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 13:39:37.842156017 +0000 UTC m=+403.305948354 I0419 13:39:37.851514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:37.851735 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:39:37.851803 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 13:39:37.851791178 +0000 UTC m=+403.315583545 I0419 13:39:37.856000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:37.863527 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 13:39:37.863520339 +0000 UTC m=+403.327312696 I0419 13:39:37.990120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:38.020357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:38.020778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-txf5h" condition "Approved" to 2026-04-19 13:39:38.020767129 +0000 UTC m=+403.484559476 I0419 13:39:38.025542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rwwmf" condition "Approved" to 2026-04-19 13:39:38.025533004 +0000 UTC m=+403.489325341 I0419 13:39:38.035679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-txf5h" condition "Ready" to 2026-04-19 13:39:38.035669976 +0000 UTC m=+403.499462313 I0419 13:39:38.037327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rwwmf" condition "Ready" to 2026-04-19 13:39:38.037315826 +0000 UTC m=+403.501108183 I0419 13:39:38.060338 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:38.060322327 +0000 UTC m=+403.524114704 I0419 13:39:38.060793 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:38.060781488 +0000 UTC m=+403.524573835 I0419 13:39:38.086804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:38.087646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:38.087981 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:38.087971481 +0000 UTC m=+403.551763838 I0419 13:39:38.293828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:38.555937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fz78b" condition "Approved" to 2026-04-19 13:39:38.55592011 +0000 UTC m=+404.019712457 I0419 13:39:38.900816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fz78b" condition "Ready" to 2026-04-19 13:39:38.900801488 +0000 UTC m=+404.364593855 I0419 13:39:39.248415 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:39.248397022 +0000 UTC m=+404.712189389 I0419 13:39:39.346335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:39.346825 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:39.346814761 +0000 UTC m=+404.810607128 I0419 13:39:39.594702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:39.644880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:45.335879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:39:45.335906 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" condition "Issuing" to 2026-04-19 13:39:45.33590039 +0000 UTC m=+410.799692727 I0419 13:39:45.335959 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" condition "Ready" to 2026-04-19 13:39:45.335939071 +0000 UTC m=+410.799731438 I0419 13:39:45.354749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6cftc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:45.354880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:39:45.354937 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" condition "Issuing" to 2026-04-19 13:39:45.354927496 +0000 UTC m=+410.818719843 I0419 13:39:45.504220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6cftc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:45.514727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6cftc-nnl8v" condition "Approved" to 2026-04-19 13:39:45.514711667 +0000 UTC m=+410.978504014 I0419 13:39:45.538107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6cftc-nnl8v" condition "Ready" to 2026-04-19 13:39:45.538090597 +0000 UTC m=+411.001882974 I0419 13:39:45.567572 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:45.567556454 +0000 UTC m=+411.031348831 I0419 13:39:45.585681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6cftc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:45.586003 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:45.585996767 +0000 UTC m=+411.049789114 I0419 13:39:45.599732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6cftc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:39:45.600148 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6cftc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:39:45.600135426 +0000 UTC m=+411.063927773 I0419 13:40:08.046093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:40:08.046123 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-19 13:40:08.04611636 +0000 UTC m=+433.509908707 I0419 13:40:08.046393 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 13:40:08.046378356 +0000 UTC m=+433.510170703 I0419 13:40:08.059825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:40:08.059908 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 13:40:08.05990051 +0000 UTC m=+433.523692857 I0419 13:40:08.359304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:40:08.390768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jt4n4" condition "Approved" to 2026-04-19 13:40:08.390751286 +0000 UTC m=+433.854543633 I0419 13:40:08.408911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-jt4n4" condition "Ready" to 2026-04-19 13:40:08.408899851 +0000 UTC m=+433.872692198 I0419 13:40:08.438186 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:40:08.438173562 +0000 UTC m=+433.901965909 I0419 13:40:08.457722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:40:08.458092 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:40:08.458082799 +0000 UTC m=+433.921875146 I0419 13:40:08.479008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:40:08.491722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:43:23.769449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:43:23.769510 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 13:43:23.769502957 +0000 UTC m=+629.233295304 I0419 13:43:23.769546 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 13:43:23.769526498 +0000 UTC m=+629.233318865 I0419 13:43:23.785855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:43:23.785972 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:43:23.786029 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 13:43:23.786021374 +0000 UTC m=+629.249813741 I0419 13:43:24.140875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rdlm4" condition "Approved" to 2026-04-19 13:43:24.140859488 +0000 UTC m=+629.604651855 I0419 13:43:24.156756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rdlm4" condition "Ready" to 2026-04-19 13:43:24.156746609 +0000 UTC m=+629.620538946 I0419 13:43:24.192326 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:43:24.192310983 +0000 UTC m=+629.656103330 I0419 13:43:24.213351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:45:51.972571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:45:51.972626 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-19 13:45:51.972615417 +0000 UTC m=+777.436407784 I0419 13:45:51.972562 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-19 13:45:51.972512234 +0000 UTC m=+777.436304611 I0419 13:45:51.988242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:45:51.988327 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-19 13:45:51.988319213 +0000 UTC m=+777.452111550 I0419 13:45:52.122740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:45:52.150802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fldmq" condition "Approved" to 2026-04-19 13:45:52.150789367 +0000 UTC m=+777.614581714 I0419 13:45:52.166146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fldmq" condition "Ready" to 2026-04-19 13:45:52.166138226 +0000 UTC m=+777.629930553 I0419 13:45:52.201275 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:45:52.201260249 +0000 UTC m=+777.665052606 I0419 13:45:52.230752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:46:58.962672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:46:58.962692 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-19 13:46:58.962662813 +0000 UTC m=+844.426455190 I0419 13:46:58.962731 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-19 13:46:58.962723254 +0000 UTC m=+844.426515611 I0419 13:46:58.976833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:46:58.976894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:46:58.976917 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-19 13:46:58.976912685 +0000 UTC m=+844.440705032 I0419 13:46:59.214378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:46:59.223092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6jf2h" condition "Approved" to 2026-04-19 13:46:59.223080644 +0000 UTC m=+844.686872991 I0419 13:46:59.238500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6jf2h" condition "Ready" to 2026-04-19 13:46:59.238488554 +0000 UTC m=+844.702280901 I0419 13:46:59.263597 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:46:59.263565437 +0000 UTC m=+844.727357774 I0419 13:46:59.286311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:46:59.326620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:50:03.247343 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-19 13:50:03.247293805 +0000 UTC m=+1028.711086152 I0419 13:50:03.247347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:50:03.247432 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-19 13:50:03.247420459 +0000 UTC m=+1028.711212856 I0419 13:50:03.267315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:50:03.267422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 13:50:03.267452 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-19 13:50:03.2674423 +0000 UTC m=+1028.731234667 I0419 13:50:03.457298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:50:03.465609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mgbjg" condition "Approved" to 2026-04-19 13:50:03.465593923 +0000 UTC m=+1028.929386290 I0419 13:50:03.484959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mgbjg" condition "Ready" to 2026-04-19 13:50:03.484948208 +0000 UTC m=+1028.948740545 I0419 13:50:03.511942 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:50:03.511931547 +0000 UTC m=+1028.975723884 I0419 13:50:03.528815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:50:03.529244 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 13:50:03.529235613 +0000 UTC m=+1028.993027960 I0419 13:50:03.548100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 13:50:03.567090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"