I0417 08:39:19.061328 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 08:39:19.061578 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 08:39:19.061724 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 08:39:19.067203 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 08:39:19.067878 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 08:39:19.067912 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 08:39:19.068032 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 08:39:19.074780 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 08:39:19.088653 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 08:39:19.091894 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 08:39:19.092045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 08:39:19.095026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 08:39:19.097444 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 08:39:19.100140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 08:39:19.105468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 08:39:19.109472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 08:39:19.112005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 08:39:19.114489 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 08:39:19.114521 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 08:39:19.114608 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 08:39:19.117142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 08:39:19.119586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 08:39:19.121876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 08:39:19.123735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 08:39:19.126137 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 08:39:19.126162 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 08:39:19.126358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 08:39:19.130595 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 08:39:19.130756 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 08:39:19.133265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 08:39:19.135640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 08:39:19.138363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 08:39:19.141897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 08:39:19.143159 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.143758 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.145837 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.170046 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.178962 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.193785 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.209268 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.222694 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.238616 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:19.243595 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 08:39:33.799429 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 08:39:33.799408856 +0000 UTC m=+14.771530336 I0417 08:39:34.574688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:39:34.574755 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 08:39:34.574734606 +0000 UTC m=+15.546856086 I0417 08:39:34.576001 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 08:39:34.575987419 +0000 UTC m=+15.548108909 E0417 08:39:34.587137 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 08:39:34.587222 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 08:39:34.587214674 +0000 UTC m=+15.559336154 E0417 08:39:34.587463 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 08:39:34.589606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:34.589957 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 08:39:34.589950043 +0000 UTC m=+15.562071533 E0417 08:39:34.603304 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 08:39:34.604512 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 08:39:34.604641 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 08:39:34.604678 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 08:39:34.609160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:34.635290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8xsz8" condition "Approved" to 2026-04-17 08:39:34.635276409 +0000 UTC m=+15.607397919 I0417 08:39:34.658423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8xsz8" condition "Ready" to 2026-04-17 08:39:34.658410528 +0000 UTC m=+15.630532028 I0417 08:39:34.679397 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:34.679387063 +0000 UTC m=+15.651508563 I0417 08:39:34.700581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:39.604357 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:39.604345119 +0000 UTC m=+20.576466629 I0417 08:39:39.764844 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 08:39:39.764829954 +0000 UTC m=+20.736951434 I0417 08:39:39.765346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:39:39.765375 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 08:39:39.76536966 +0000 UTC m=+20.737491150 I0417 08:39:39.787066 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 08:39:39.787055049 +0000 UTC m=+20.759176529 I0417 08:39:39.795126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:39.795200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:39:39.795219 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 08:39:39.795214391 +0000 UTC m=+20.767335871 I0417 08:39:40.116184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q96jk" condition "Approved" to 2026-04-17 08:39:40.116175468 +0000 UTC m=+21.088296958 I0417 08:39:40.143076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q96jk" condition "Ready" to 2026-04-17 08:39:40.14306847 +0000 UTC m=+21.115189950 I0417 08:39:40.188991 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:40.188979322 +0000 UTC m=+21.161100822 I0417 08:39:40.210799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:40.211122 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:40.211117366 +0000 UTC m=+21.183238836 I0417 08:39:40.234213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:44.912704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:39:44.912741 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 08:39:44.912735759 +0000 UTC m=+25.884857229 E0417 08:39:44.913022 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 08:39:44.913085 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 08:39:44.913057672 +0000 UTC m=+25.885179152 I0417 08:39:44.913115 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 08:39:44.913530 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 08:39:44.913523437 +0000 UTC m=+25.885644917 I0417 08:39:44.919822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:39:44.921070 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 08:39:44.921061112 +0000 UTC m=+25.893182592 I0417 08:39:44.920641 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 08:39:44.920628908 +0000 UTC m=+25.892750388 E0417 08:39:44.927380 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0417 08:39:44.927771 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 08:39:44.927797 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 08:39:44.927848 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0417 08:39:44.935093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:44.935177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:39:44.935263 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 08:39:44.935257154 +0000 UTC m=+25.907378624 I0417 08:39:44.941893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:44.941962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:39:44.941986 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 08:39:44.941979391 +0000 UTC m=+25.914100881 I0417 08:39:45.090496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:45.102281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-qvptx" condition "Approved" to 2026-04-17 08:39:45.102265766 +0000 UTC m=+26.074387276 I0417 08:39:45.120120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-qvptx" condition "Ready" to 2026-04-17 08:39:45.120106512 +0000 UTC m=+26.092228002 I0417 08:39:45.233415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:45.316121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-d68ph" condition "Approved" to 2026-04-17 08:39:45.31608837 +0000 UTC m=+26.288209880 I0417 08:39:45.360697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-d68ph" condition "Ready" to 2026-04-17 08:39:45.360613112 +0000 UTC m=+26.332734632 I0417 08:39:45.395683 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:45.395670981 +0000 UTC m=+26.367792471 I0417 08:39:45.413501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:45.414518 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:45.414508598 +0000 UTC m=+26.386630098 I0417 08:39:45.437112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:45.437610 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:45.437601448 +0000 UTC m=+26.409722938 I0417 08:39:45.438150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:39:49.928365 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:49.928348985 +0000 UTC m=+30.900470495 I0417 08:39:50.005317 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-qvptx" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:50.00530387 +0000 UTC m=+30.977425350 I0417 08:39:50.358777 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:39:50.358762011 +0000 UTC m=+31.330883501 I0417 08:39:50.380162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:44:15.897793 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready" to 2026-04-17 08:44:15.897772524 +0000 UTC m=+296.869894004 I0417 08:44:15.898334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-152.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:44:15.898354 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Issuing" to 2026-04-17 08:44:15.898351136 +0000 UTC m=+296.870472606 I0417 08:44:15.921008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:44:15.921097 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready" to 2026-04-17 08:44:15.921085322 +0000 UTC m=+296.893206822 I0417 08:44:16.096116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:44:16.132492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-152.nip.io-tls-clklp" condition "Approved" to 2026-04-17 08:44:16.132470178 +0000 UTC m=+297.104591688 I0417 08:44:16.153253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-152.nip.io-tls-clklp" condition "Ready" to 2026-04-17 08:44:16.153233581 +0000 UTC m=+297.125355081 I0417 08:44:16.182123 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:44:16.1821034 +0000 UTC m=+297.154224900 I0417 08:44:16.218731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:44:16.219078 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:44:16.219070104 +0000 UTC m=+297.191191584 I0417 08:44:16.224253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:44:16.236234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:44:16.236573 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:44:16.236563671 +0000 UTC m=+297.208685161 I0417 08:45:28.132163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:45:28.132303 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 08:45:28.132292807 +0000 UTC m=+369.104414307 I0417 08:45:28.132733 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 08:45:28.132713614 +0000 UTC m=+369.104835134 I0417 08:45:28.145714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:45:28.145827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:45:28.145866 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 08:45:28.145859664 +0000 UTC m=+369.117981144 E0417 08:45:28.151754 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 08:45:28.151807 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 08:45:28.151796353 +0000 UTC m=+369.123917863 E0417 08:45:28.152213 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 08:45:28.163666 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 08:45:28.163791 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 08:45:28.163865 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 08:45:28.163930 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 08:45:28.179911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:45:28.184636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-frrhc" condition "Approved" to 2026-04-17 08:45:28.184619592 +0000 UTC m=+369.156741102 I0417 08:45:28.196769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-frrhc" condition "Ready" to 2026-04-17 08:45:28.196759396 +0000 UTC m=+369.168880886 I0417 08:45:28.216125 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:45:28.21611197 +0000 UTC m=+369.188233460 I0417 08:45:28.232030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:45:33.164622 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:45:33.164608706 +0000 UTC m=+374.136730226 I0417 08:46:13.927508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:46:13.927538 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 08:46:13.927531153 +0000 UTC m=+414.899652643 I0417 08:46:13.927920 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 08:46:13.927914258 +0000 UTC m=+414.900035748 I0417 08:46:13.948554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:46:13.948566 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 08:46:13.948542785 +0000 UTC m=+414.920664265 I0417 08:46:13.948585 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 08:46:13.948581756 +0000 UTC m=+414.920703236 I0417 08:46:13.949750 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 08:46:13.949735703 +0000 UTC m=+414.921857203 I0417 08:46:13.950031 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:46:13.950050 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 08:46:13.950046728 +0000 UTC m=+414.922168208 I0417 08:46:13.961163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:13.977235 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:46:13.977329 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 08:46:13.977320255 +0000 UTC m=+414.949441735 I0417 08:46:13.983184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:13.983291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:13.983289 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 08:46:13.983282736 +0000 UTC m=+414.955404216 I0417 08:46:13.983327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:46:13.983431 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 08:46:13.983423858 +0000 UTC m=+414.955545348 I0417 08:46:14.245810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:14.270368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:14.293788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qhq4v" condition "Approved" to 2026-04-17 08:46:14.293775722 +0000 UTC m=+415.265897212 I0417 08:46:14.301494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2rmbk" condition "Approved" to 2026-04-17 08:46:14.30148325 +0000 UTC m=+415.273604740 I0417 08:46:14.339002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2rmbk" condition "Ready" to 2026-04-17 08:46:14.338994643 +0000 UTC m=+415.311116113 I0417 08:46:14.340525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qhq4v" condition "Ready" to 2026-04-17 08:46:14.340516287 +0000 UTC m=+415.312637767 I0417 08:46:14.446255 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:14.446242552 +0000 UTC m=+415.418364042 I0417 08:46:14.446505 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:14.446496197 +0000 UTC m=+415.418617677 I0417 08:46:14.474120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:14.474438 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:14.474430024 +0000 UTC m=+415.446551504 I0417 08:46:14.482189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:14.485160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:14.718154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rxqkv" condition "Approved" to 2026-04-17 08:46:14.718143908 +0000 UTC m=+415.690265388 E0417 08:46:14.763695 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-pqbtw\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0417 08:46:14.932142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rxqkv" condition "Ready" to 2026-04-17 08:46:14.932125508 +0000 UTC m=+415.904246988 I0417 08:46:15.613354 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-rxqkv" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-jdhgl" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0417 08:46:15.716019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:15.866329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:15.927407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rbcrp" condition "Approved" to 2026-04-17 08:46:15.927393073 +0000 UTC m=+416.899514563 I0417 08:46:16.175054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rbcrp" condition "Ready" to 2026-04-17 08:46:16.175044437 +0000 UTC m=+417.147165927 I0417 08:46:16.466336 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:16.466321453 +0000 UTC m=+417.438442943 I0417 08:46:16.564679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:16.565055 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:16.565045767 +0000 UTC m=+417.537167257 I0417 08:46:16.826607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:16.871060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:21.982893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-849x6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:46:21.982971 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-849x6-tls" condition "Issuing" to 2026-04-17 08:46:21.982921631 +0000 UTC m=+422.955043151 I0417 08:46:21.982873 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-849x6-tls" condition "Ready" to 2026-04-17 08:46:21.982814489 +0000 UTC m=+422.954935999 I0417 08:46:21.996888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-849x6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-849x6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:21.996975 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-849x6-tls" condition "Ready" to 2026-04-17 08:46:21.996966693 +0000 UTC m=+422.969088193 I0417 08:46:22.156314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-849x6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-849x6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:22.189019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-849x6-d2ssg" condition "Approved" to 2026-04-17 08:46:22.189006998 +0000 UTC m=+423.161128478 I0417 08:46:22.208007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-849x6-d2ssg" condition "Ready" to 2026-04-17 08:46:22.207999134 +0000 UTC m=+423.180120614 I0417 08:46:22.242126 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-849x6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:22.242114909 +0000 UTC m=+423.214236389 I0417 08:46:22.263507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-849x6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-849x6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:22.264491 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-849x6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:22.264404565 +0000 UTC m=+423.236526075 I0417 08:46:22.280139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-849x6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-849x6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:22.280394 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-849x6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:22.280387016 +0000 UTC m=+423.252508496 I0417 08:46:34.965078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:46:34.965114 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 08:46:34.965106492 +0000 UTC m=+435.937227992 I0417 08:46:34.965114 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 08:46:34.965104802 +0000 UTC m=+435.937226282 I0417 08:46:34.982029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:34.982119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:46:34.982140 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 08:46:34.982133974 +0000 UTC m=+435.954255464 I0417 08:46:35.155368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:35.162946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-s54w5" condition "Approved" to 2026-04-17 08:46:35.162919475 +0000 UTC m=+436.135040965 I0417 08:46:35.179334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-s54w5" condition "Ready" to 2026-04-17 08:46:35.179323268 +0000 UTC m=+436.151444758 I0417 08:46:35.217418 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:35.21740274 +0000 UTC m=+436.189524230 I0417 08:46:35.247928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:46:35.248241 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:46:35.248233735 +0000 UTC m=+436.220355225 I0417 08:46:35.268820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:47:51.925225 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 08:47:51.92521004 +0000 UTC m=+512.897331530 I0417 08:47:51.925241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:47:51.925493 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 08:47:51.925484464 +0000 UTC m=+512.897605974 I0417 08:47:51.952947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:47:51.953036 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 08:47:51.953025225 +0000 UTC m=+512.925146725 I0417 08:47:52.106112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:47:52.142161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nttwj" condition "Approved" to 2026-04-17 08:47:52.142150175 +0000 UTC m=+513.114271655 I0417 08:47:52.163266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nttwj" condition "Ready" to 2026-04-17 08:47:52.16325491 +0000 UTC m=+513.135376400 I0417 08:47:52.200342 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:47:52.20032943 +0000 UTC m=+513.172450910 I0417 08:47:52.224198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:47:52.224486 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:47:52.224472025 +0000 UTC m=+513.196593505 I0417 08:47:52.247946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:48:38.412951 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 08:48:38.412935779 +0000 UTC m=+559.385057269 I0417 08:48:38.413249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:48:38.413270 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 08:48:38.413265494 +0000 UTC m=+559.385386984 I0417 08:48:38.427748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:48:38.427823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 08:48:38.427849 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 08:48:38.427843304 +0000 UTC m=+559.399964794 I0417 08:48:38.654515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lzv2h" condition "Approved" to 2026-04-17 08:48:38.654503323 +0000 UTC m=+559.626624803 I0417 08:48:38.674765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lzv2h" condition "Ready" to 2026-04-17 08:48:38.674752996 +0000 UTC m=+559.646874476 I0417 08:48:38.704536 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:48:38.704520983 +0000 UTC m=+559.676642473 I0417 08:48:38.734089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 08:48:38.734379 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 08:48:38.734374512 +0000 UTC m=+559.706495992 I0417 08:48:38.749640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"