I0417 18:45:29.371196       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0417 18:45:29.371274       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0417 18:45:29.371334       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0417 18:45:29.373508       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0417 18:45:29.373813       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0417 18:45:29.373934       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0417 18:45:29.373970       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0417 18:45:29.375556       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0417 18:45:29.389817       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0417 18:45:29.393872       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0417 18:45:29.400575       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0417 18:45:29.404604       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0417 18:45:29.408055       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0417 18:45:29.409837       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0417 18:45:29.411767       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0417 18:45:29.411883       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0417 18:45:29.413619       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0417 18:45:29.416430       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0417 18:45:29.421124       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0417 18:45:29.421217       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0417 18:45:29.424907       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0417 18:45:29.427344       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0417 18:45:29.429932       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0417 18:45:29.430060       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0417 18:45:29.432476       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0417 18:45:29.434335       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0417 18:45:29.436040       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0417 18:45:29.436064       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0417 18:45:29.436075       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0417 18:45:29.436113       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0417 18:45:29.438127       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0417 18:45:29.444532       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0417 18:45:29.448259       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0417 18:45:29.451603       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.451906       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.452139       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.452211       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.467932       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.487357       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.503254       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.523395       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.542584       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:29.542978       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0417 18:45:40.247377       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 18:45:40.247361235 +0000 UTC m=+10.911220984
I0417 18:45:40.989919       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:45:40.989903932 +0000 UTC m=+11.653763691
I0417 18:45:40.990349       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:45:40.990432       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:45:40.990424147 +0000 UTC m=+11.654283906
I0417 18:45:41.004062       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:41.004138       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:45:41.004129455 +0000 UTC m=+11.667989184
E0417 18:45:41.006749       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:45:41.006834       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 18:45:41.006824794 +0000 UTC m=+11.670684523
E0417 18:45:41.006892       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:45:41.038068       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0417 18:45:41.038204       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:45:41.038361       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:45:41.038414       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0417 18:45:41.042646       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:41.084615       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-msbm2" condition "Approved" to 2026-04-17 18:45:41.084602626 +0000 UTC m=+11.748462385
I0417 18:45:41.110037       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-msbm2" condition "Ready" to 2026-04-17 18:45:41.110014747 +0000 UTC m=+11.773874476
I0417 18:45:41.133092       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:41.133081398 +0000 UTC m=+11.796941117
I0417 18:45:41.148702       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:41.149539       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:41.149529036 +0000 UTC m=+11.813388765
I0417 18:45:41.169146       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:45:41.169409       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:41.169400744 +0000 UTC m=+11.833260453
I0417 18:45:46.038760       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:46.038743352 +0000 UTC m=+16.702603101
I0417 18:46:06.998015       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:46:06.998028       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 18:46:06.998014055 +0000 UTC m=+37.661873774
I0417 18:46:06.998051       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:46:06.998043726 +0000 UTC m=+37.661903455
I0417 18:46:07.015635       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 18:46:07.015622878 +0000 UTC m=+37.679482617
I0417 18:46:07.022422       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:07.022689       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 18:46:07.022678289 +0000 UTC m=+37.686538008
I0417 18:46:07.370611       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:07.408207       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wvlgg" condition "Approved" to 2026-04-17 18:46:07.408195885 +0000 UTC m=+38.072055634
I0417 18:46:07.444204       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wvlgg" condition "Ready" to 2026-04-17 18:46:07.444193104 +0000 UTC m=+38.108052823
I0417 18:46:07.475332       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:07.475318423 +0000 UTC m=+38.139178152
I0417 18:46:07.496024       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:46:07.555147       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:48.205412       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 18:47:48.205396646 +0000 UTC m=+138.869256365
I0417 18:47:48.205794       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:47:48.205818       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 18:47:48.205813588 +0000 UTC m=+138.869673307
E0417 18:47:48.218092       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0417 18:47:48.218136       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 18:47:48.218131349 +0000 UTC m=+138.881991068
I0417 18:47:48.218166       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0417 18:47:48.220888       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:48.220948       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 18:47:48.22093968 +0000 UTC m=+138.884799409
E0417 18:47:48.227692       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0417 18:47:48.228221       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 18:47:48.228209566 +0000 UTC m=+138.892069315
I0417 18:47:48.228237       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:47:48.228263       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 18:47:48.228257308 +0000 UTC m=+138.892117037
E0417 18:47:48.228556       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0417 18:47:48.228608       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0417 18:47:48.228657       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0417 18:47:48.246521       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:48.246754       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 18:47:48.246714394 +0000 UTC m=+138.910574143
I0417 18:47:48.411050       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:48.443210       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-k9dq8" condition "Approved" to 2026-04-17 18:47:48.443194463 +0000 UTC m=+139.107054192
I0417 18:47:48.462567       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-k9dq8" condition "Ready" to 2026-04-17 18:47:48.462554275 +0000 UTC m=+139.126414004
I0417 18:47:48.507650       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:48.542447       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r8xls" condition "Approved" to 2026-04-17 18:47:48.542427622 +0000 UTC m=+139.206287371
I0417 18:47:48.570987       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r8xls" condition "Ready" to 2026-04-17 18:47:48.570972035 +0000 UTC m=+139.234831794
I0417 18:47:48.601369       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:48.601350531 +0000 UTC m=+139.265210280
I0417 18:47:48.619648       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:48.620027       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:48.620017142 +0000 UTC m=+139.283876891
I0417 18:47:48.635186       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:48.640278       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:47:53.228465       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:53.228452215 +0000 UTC m=+143.892311964
I0417 18:47:53.244904       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-k9dq8" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:53.244896583 +0000 UTC m=+143.908756312
I0417 18:47:53.277507       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:47:53.277498743 +0000 UTC m=+143.941358472
I0417 18:47:53.308272       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:20.015631       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-17 18:50:20.015616755 +0000 UTC m=+290.679476484
I0417 18:50:20.016114       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:50:20.016134       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-04-17 18:50:20.016129789 +0000 UTC m=+290.679989528
I0417 18:50:20.031189       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:20.031237       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:50:20.031252       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-04-17 18:50:20.03124659 +0000 UTC m=+290.695106319
I0417 18:50:20.215841       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:20.226314       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-bvmcn" condition "Approved" to 2026-04-17 18:50:20.226304478 +0000 UTC m=+290.890164207
I0417 18:50:20.241618       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-bvmcn" condition "Ready" to 2026-04-17 18:50:20.241605413 +0000 UTC m=+290.905465152
I0417 18:50:20.269305       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:20.269288091 +0000 UTC m=+290.933147850
I0417 18:50:20.287511       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:20.288015       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:20.288009594 +0000 UTC m=+290.951869323
I0417 18:50:20.302268       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:20.306542       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:50:20.306840       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:20.306831989 +0000 UTC m=+290.970691718
I0417 18:51:38.770469       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:51:38.77045328 +0000 UTC m=+369.434313009
I0417 18:51:38.770550       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:51:38.770610       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:51:38.770598355 +0000 UTC m=+369.434458114
E0417 18:51:38.784053       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:51:38.784117       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 18:51:38.784108488 +0000 UTC m=+369.447968217
E0417 18:51:38.784174       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0417 18:51:38.787222       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:51:38.787350       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:51:38.78733851 +0000 UTC m=+369.451198239
E0417 18:51:38.795029       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0417 18:51:38.795134       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:51:38.795245       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0417 18:51:38.795304       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0417 18:51:38.803624       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:51:38.826896       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5vgk8" condition "Approved" to 2026-04-17 18:51:38.826870783 +0000 UTC m=+369.490730532
I0417 18:51:38.840511       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5vgk8" condition "Ready" to 2026-04-17 18:51:38.84049661 +0000 UTC m=+369.504356339
I0417 18:51:38.868810       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:38.868796383 +0000 UTC m=+369.532656112
I0417 18:51:38.888612       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:51:38.888823       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:38.888816462 +0000 UTC m=+369.552676191
I0417 18:51:38.904551       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:51:38.905067       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:38.905054413 +0000 UTC m=+369.568914172
I0417 18:51:43.796395       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:43.796375571 +0000 UTC m=+374.460235290
I0417 18:52:21.762202       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:52:21.762246       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:52:21.762238427 +0000 UTC m=+412.426098156
I0417 18:52:21.762308       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:52:21.762278809 +0000 UTC m=+412.426138528
I0417 18:52:21.765987       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:52:21.765976513 +0000 UTC m=+412.429836232
I0417 18:52:21.767206       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:52:21.767226       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 18:52:21.767222938 +0000 UTC m=+412.431082647
I0417 18:52:21.768630       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:52:21.768662       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 18:52:21.768655079 +0000 UTC m=+412.432514798
I0417 18:52:21.769027       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:52:21.769014719 +0000 UTC m=+412.432874438
I0417 18:52:21.782077       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:21.783756       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:52:21.783810       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:52:21.783800769 +0000 UTC m=+412.447660518
I0417 18:52:21.792996       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:21.793829       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:52:21.793813404 +0000 UTC m=+412.457673133
I0417 18:52:21.800148       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:21.800226       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:52:21.800265       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 18:52:21.800256546 +0000 UTC m=+412.464116285
I0417 18:52:21.931910       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:21.943824       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vq7gb" condition "Approved" to 2026-04-17 18:52:21.943810983 +0000 UTC m=+412.607670712
I0417 18:52:21.944737       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:21.960028       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:21.970786       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-r4k5q" condition "Approved" to 2026-04-17 18:52:21.970774319 +0000 UTC m=+412.634634058
I0417 18:52:21.977915       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vq7gb" condition "Ready" to 2026-04-17 18:52:21.977907792 +0000 UTC m=+412.641767521
I0417 18:52:21.980637       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dvfrm" condition "Approved" to 2026-04-17 18:52:21.98063069 +0000 UTC m=+412.644490419
I0417 18:52:21.986333       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-r4k5q" condition "Ready" to 2026-04-17 18:52:21.986326861 +0000 UTC m=+412.650186570
I0417 18:52:22.000343       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dvfrm" condition "Ready" to 2026-04-17 18:52:22.000331619 +0000 UTC m=+412.664191368
I0417 18:52:22.251726       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:22.251689476 +0000 UTC m=+412.915549195
I0417 18:52:22.446853       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:22.446793368 +0000 UTC m=+413.110653117
I0417 18:52:22.549067       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:22.549471       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:22.549463574 +0000 UTC m=+413.213323303
I0417 18:52:22.597908       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:22.597894769 +0000 UTC m=+413.261754498
I0417 18:52:22.743657       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:22.744289       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:22.744277995 +0000 UTC m=+413.408137744
I0417 18:52:23.048411       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:23.048400067 +0000 UTC m=+413.712259796
I0417 18:52:23.060772       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:23.297177       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:23.347263       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:23.396376       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:23.499346       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:23.545209       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:23.894568       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:29.743379       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-478wd-tls" condition "Ready" to 2026-04-17 18:52:29.743364033 +0000 UTC m=+420.407223762
I0417 18:52:29.743853       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-478wd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:52:29.743906       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-478wd-tls" condition "Issuing" to 2026-04-17 18:52:29.743894818 +0000 UTC m=+420.407754567
I0417 18:52:29.767915       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-478wd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-478wd-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:29.768129       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-478wd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:52:29.768279       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-478wd-tls" condition "Issuing" to 2026-04-17 18:52:29.768266751 +0000 UTC m=+420.432126520
I0417 18:52:30.004141       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-478wd-6b74t" condition "Approved" to 2026-04-17 18:52:30.004126094 +0000 UTC m=+420.667985823
I0417 18:52:30.021900       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-478wd-6b74t" condition "Ready" to 2026-04-17 18:52:30.021888598 +0000 UTC m=+420.685748327
I0417 18:52:30.056013       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-478wd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:30.055994337 +0000 UTC m=+420.719854066
I0417 18:52:30.086347       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-478wd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-478wd-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:30.086626       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-478wd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:30.086618828 +0000 UTC m=+420.750478547
I0417 18:52:30.103375       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-478wd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-478wd-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:30.103876       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-478wd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:30.103864707 +0000 UTC m=+420.767724446
I0417 18:52:49.841266       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:52:49.841266       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:52:49.841245741 +0000 UTC m=+440.505105490
I0417 18:52:49.841310       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 18:52:49.841301592 +0000 UTC m=+440.505161321
I0417 18:52:49.873194       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:49.873301       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:52:49.873291771 +0000 UTC m=+440.537151510
I0417 18:52:50.053719       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:52:50.100583       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8m7f9" condition "Approved" to 2026-04-17 18:52:50.100572269 +0000 UTC m=+440.764431988
I0417 18:52:50.123073       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8m7f9" condition "Ready" to 2026-04-17 18:52:50.12305646 +0000 UTC m=+440.786916189
I0417 18:52:50.158258       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:50.158240659 +0000 UTC m=+440.822100418
I0417 18:52:50.180205       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:56:10.030478       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:56:10.030550       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 18:56:10.030543231 +0000 UTC m=+640.694402960
I0417 18:56:10.030579       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:56:10.030559371 +0000 UTC m=+640.694419100
I0417 18:56:10.049984       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:56:10.050094       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:56:10.050111       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 18:56:10.050105253 +0000 UTC m=+640.713964982
I0417 18:56:10.428722       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wz5jt" condition "Approved" to 2026-04-17 18:56:10.428712571 +0000 UTC m=+641.092572300
I0417 18:56:10.458395       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wz5jt" condition "Ready" to 2026-04-17 18:56:10.458369572 +0000 UTC m=+641.122229331
I0417 18:56:10.489899       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:56:10.489886269 +0000 UTC m=+641.153745998
I0417 18:56:10.508483       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:56:10.508860       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:56:10.508853623 +0000 UTC m=+641.172713352
I0417 18:56:10.514794       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:56:10.534103       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:56:10.534998       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:56:10.535392       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:56:10.535382096 +0000 UTC m=+641.199241835
I0417 18:58:36.378657       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 18:58:36.378643752 +0000 UTC m=+787.042503471
I0417 18:58:36.378689       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:58:36.379119       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 18:58:36.379106495 +0000 UTC m=+787.042966254
I0417 18:58:36.395690       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:58:36.395867       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:58:36.395901       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 18:58:36.395891235 +0000 UTC m=+787.059750994
I0417 18:58:36.689612       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8kkwn" condition "Approved" to 2026-04-17 18:58:36.689586652 +0000 UTC m=+787.353446381
I0417 18:58:36.715670       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8kkwn" condition "Ready" to 2026-04-17 18:58:36.715646597 +0000 UTC m=+787.379506336
I0417 18:58:36.744598       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:58:36.744586705 +0000 UTC m=+787.408446434
I0417 18:58:36.773561       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:58:36.773909       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:58:36.773902265 +0000 UTC m=+787.437761994
I0417 18:58:36.778729       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:58:36.792582       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:59:39.742428       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 18:59:39.742412996 +0000 UTC m=+850.406272715
I0417 18:59:39.742549       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:59:39.742592       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 18:59:39.74258307 +0000 UTC m=+850.406442799
I0417 18:59:39.757848       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:59:39.757938       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 18:59:39.757963       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 18:59:39.75795661 +0000 UTC m=+850.421816339
I0417 18:59:39.993456       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:59:40.006259       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7s2sd" condition "Approved" to 2026-04-17 18:59:40.006243367 +0000 UTC m=+850.670103096
I0417 18:59:40.025698       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7s2sd" condition "Ready" to 2026-04-17 18:59:40.025685333 +0000 UTC m=+850.689545062
I0417 18:59:40.066034       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:59:40.066017757 +0000 UTC m=+850.729877496
I0417 18:59:40.086533       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:59:40.086849       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:59:40.086839734 +0000 UTC m=+850.750699463
I0417 18:59:40.108673       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:59:40.110827       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 18:59:40.111251       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:59:40.111240311 +0000 UTC m=+850.775100040
I0417 19:02:52.768950       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 19:02:52.769106       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 19:02:52.769073794 +0000 UTC m=+1043.432933553
I0417 19:02:52.769190       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 19:02:52.769176957 +0000 UTC m=+1043.433036706
I0417 19:02:52.823548       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 19:02:52.823670       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0417 19:02:52.823899       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 19:02:52.823888696 +0000 UTC m=+1043.487748425
I0417 19:02:53.185377       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 19:02:53.195267       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-tc2cv" condition "Approved" to 2026-04-17 19:02:53.195254504 +0000 UTC m=+1043.859114223
I0417 19:02:53.271485       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-tc2cv" condition "Ready" to 2026-04-17 19:02:53.271474584 +0000 UTC m=+1043.935334303
I0417 19:02:53.324999       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 19:02:53.324986728 +0000 UTC m=+1043.988846447
I0417 19:02:53.349074       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0417 19:02:53.349635       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 19:02:53.349625539 +0000 UTC m=+1044.013485298
I0417 19:02:53.373912       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"