I0413 17:12:02.481155 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 17:12:02.481283 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 17:12:02.481358 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 17:12:02.486444 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 17:12:02.486779 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 17:12:02.486860 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 17:12:02.486884 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 17:12:02.489220 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 17:12:02.504402 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 17:12:02.506815 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 17:12:02.508812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 17:12:02.510817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 17:12:02.516098 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 17:12:02.516147 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 17:12:02.519079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 17:12:02.521558 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 17:12:02.524199 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 17:12:02.524343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 17:12:02.526524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 17:12:02.528836 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 17:12:02.528987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 17:12:02.531188 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 17:12:02.531214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 17:12:02.533770 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 17:12:02.541497 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 17:12:02.543395 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 17:12:02.545169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 17:12:02.547012 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 17:12:02.548826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 17:12:02.550636 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 17:12:02.550659 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 17:12:02.550725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 17:12:02.552930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 17:12:02.555324 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.555675 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.556585 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.580508 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.597665 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.614228 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.650911 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.654501 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.672706 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:02.689536 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:12:14.543148 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 17:12:14.543128432 +0000 UTC m=+12.094015726 I0413 17:12:15.253281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:15.253323 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 17:12:15.253314788 +0000 UTC m=+12.804202052 I0413 17:12:15.253359 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 17:12:15.253352529 +0000 UTC m=+12.804239793 E0413 17:12:15.269477 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:12:15.269628 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 17:12:15.269619073 +0000 UTC m=+12.820506357 E0413 17:12:15.269683 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:12:15.270996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:15.271128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:15.271152 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 17:12:15.271145511 +0000 UTC m=+12.822032805 E0413 17:12:15.283639 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 17:12:15.283955 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:12:15.284712 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:12:15.284847 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 17:12:15.313202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:15.321558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mhgpc" condition "Approved" to 2026-04-13 17:12:15.321544002 +0000 UTC m=+12.872431286 I0413 17:12:15.332816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mhgpc" condition "Ready" to 2026-04-13 17:12:15.332806992 +0000 UTC m=+12.883694256 I0413 17:12:15.354952 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:15.354925771 +0000 UTC m=+12.905813025 I0413 17:12:15.375156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:15.375406 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:15.3754004 +0000 UTC m=+12.926287664 I0413 17:12:15.379824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:15.389874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:15.390153 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:15.390143976 +0000 UTC m=+12.941031240 I0413 17:12:20.284047 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:20.284038812 +0000 UTC m=+17.834926066 I0413 17:12:40.258831 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 17:12:40.258810816 +0000 UTC m=+37.809698100 I0413 17:12:40.258982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:40.259150 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 17:12:40.259134524 +0000 UTC m=+37.810021828 I0413 17:12:40.276328 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 17:12:40.276233224 +0000 UTC m=+37.827120488 I0413 17:12:40.280388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:40.280644 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 17:12:40.280632595 +0000 UTC m=+37.831519909 I0413 17:12:40.424487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:40.459967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bfsqp" condition "Approved" to 2026-04-13 17:12:40.459954704 +0000 UTC m=+38.010841988 I0413 17:12:40.489023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bfsqp" condition "Ready" to 2026-04-13 17:12:40.489011514 +0000 UTC m=+38.039898778 I0413 17:12:40.525421 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:40.52540691 +0000 UTC m=+38.076294194 I0413 17:12:40.546890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:40.547256 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:40.547249019 +0000 UTC m=+38.098136283 I0413 17:12:40.558479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:40.568237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:14:13.200726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:14:13.200772 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 17:14:13.200763541 +0000 UTC m=+130.751650805 I0413 17:14:13.200777 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-13 17:14:13.200756861 +0000 UTC m=+130.751644165 E0413 17:14:13.215549 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 17:14:13.215591 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-13 17:14:13.21558397 +0000 UTC m=+130.766471234 I0413 17:14:13.215642 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 17:14:13.218675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:14:13.218764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:14:13.218795 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 17:14:13.21878833 +0000 UTC m=+130.769675604 E0413 17:14:13.225430 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0413 17:14:13.225536 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 17:14:13.225570 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0413 17:14:13.225617 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0413 17:14:13.230400 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-13 17:14:13.230384429 +0000 UTC m=+130.781271703 I0413 17:14:13.230460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:14:13.230489 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 17:14:13.230481981 +0000 UTC m=+130.781369235 I0413 17:14:13.244832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:14:13.244912 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:14:13.244931 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 17:14:13.24492347 +0000 UTC m=+130.795810734 I0413 17:14:13.414126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-thmrt" condition "Approved" to 2026-04-13 17:14:13.414082381 +0000 UTC m=+130.964969645 I0413 17:14:13.450471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-thmrt" condition "Ready" to 2026-04-13 17:14:13.450458897 +0000 UTC m=+131.001346161 I0413 17:14:13.463148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:14:13.471284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rs8jj" condition "Approved" to 2026-04-13 17:14:13.471268674 +0000 UTC m=+131.022155928 I0413 17:14:13.496878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rs8jj" condition "Ready" to 2026-04-13 17:14:13.496862331 +0000 UTC m=+131.047749595 I0413 17:14:13.527808 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:13.527794261 +0000 UTC m=+131.078681515 I0413 17:14:13.547545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:14:18.226087 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:18.22607426 +0000 UTC m=+135.776961554 I0413 17:14:18.243730 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-thmrt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:18.243714489 +0000 UTC m=+135.794601783 I0413 17:14:18.272849 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:18.272835404 +0000 UTC m=+135.823722658 I0413 17:14:18.295466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:14:18.295708 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:18.295700393 +0000 UTC m=+135.846587647 I0413 17:14:18.312180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:48.712370 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-171.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:16:48.712407 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Issuing" to 2026-04-13 17:16:48.712400934 +0000 UTC m=+286.263288198 I0413 17:16:48.712560 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready" to 2026-04-13 17:16:48.712537777 +0000 UTC m=+286.263425071 I0413 17:16:48.728972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:48.729108 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready" to 2026-04-13 17:16:48.729097309 +0000 UTC m=+286.279984573 I0413 17:16:48.906239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:48.932563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-171.nip.io-tls-jptvn" condition "Approved" to 2026-04-13 17:16:48.932547157 +0000 UTC m=+286.483434451 I0413 17:16:48.949735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-171.nip.io-tls-jptvn" condition "Ready" to 2026-04-13 17:16:48.949723983 +0000 UTC m=+286.500611237 I0413 17:16:48.975293 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:48.975273668 +0000 UTC m=+286.526160972 I0413 17:16:48.998870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:48.999299 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-171.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:48.999288695 +0000 UTC m=+286.550175989 I0413 17:16:49.022536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-171.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-171.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:17:59.114462 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 17:17:59.114424882 +0000 UTC m=+356.665312146 I0413 17:17:59.114526 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:17:59.114570 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 17:17:59.114557826 +0000 UTC m=+356.665445110 I0413 17:17:59.128685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:17:59.128747 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 17:17:59.128740348 +0000 UTC m=+356.679627612 E0413 17:17:59.129179 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:17:59.129205 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 17:17:59.12920061 +0000 UTC m=+356.680087874 E0413 17:17:59.129240 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:17:59.140436 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 17:17:59.140523 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:17:59.140550 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:17:59.140576 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 17:17:59.143227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:17:59.165369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rh88j" condition "Approved" to 2026-04-13 17:17:59.165351998 +0000 UTC m=+356.716239292 I0413 17:17:59.176418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rh88j" condition "Ready" to 2026-04-13 17:17:59.176405663 +0000 UTC m=+356.727292927 I0413 17:17:59.201114 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:17:59.201083447 +0000 UTC m=+356.751970711 I0413 17:17:59.220825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:17:59.259664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:04.141153 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:04.141139096 +0000 UTC m=+361.692026390 I0413 17:18:41.675311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:41.675366 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 17:18:41.675351378 +0000 UTC m=+399.226238652 I0413 17:18:41.675355 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 17:18:41.675347918 +0000 UTC m=+399.226235162 I0413 17:18:41.681336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:41.681362 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 17:18:41.681353457 +0000 UTC m=+399.232240701 I0413 17:18:41.681502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:41.681516 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 17:18:41.681514121 +0000 UTC m=+399.232401375 I0413 17:18:41.681576 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 17:18:41.681563582 +0000 UTC m=+399.232450826 I0413 17:18:41.681648 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 17:18:41.681645524 +0000 UTC m=+399.232532778 I0413 17:18:41.712546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:41.712610 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 17:18:41.712603764 +0000 UTC m=+399.263491028 I0413 17:18:41.714770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:41.714845 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 17:18:41.71483767 +0000 UTC m=+399.265724924 I0413 17:18:41.717126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:41.717183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:41.717203 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 17:18:41.717199259 +0000 UTC m=+399.268086503 I0413 17:18:41.802330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:41.842287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-frpx2" condition "Approved" to 2026-04-13 17:18:41.842269718 +0000 UTC m=+399.393157012 I0413 17:18:41.865196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-frpx2" condition "Ready" to 2026-04-13 17:18:41.865182358 +0000 UTC m=+399.416069642 I0413 17:18:41.894940 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:41.894932117 +0000 UTC m=+399.445819391 I0413 17:18:41.915612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:41.915959 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:41.91595194 +0000 UTC m=+399.466839224 I0413 17:18:41.945052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:41.954419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:42.121628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5rpx7" condition "Approved" to 2026-04-13 17:18:42.121614542 +0000 UTC m=+399.672501796 I0413 17:18:42.136630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5rpx7" condition "Ready" to 2026-04-13 17:18:42.136619926 +0000 UTC m=+399.687507190 I0413 17:18:42.168064 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:42.168040716 +0000 UTC m=+399.718927980 I0413 17:18:42.231304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:42.231658 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:42.231646228 +0000 UTC m=+399.782533522 I0413 17:18:42.520625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:42.570223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:42.825361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g4wjr" condition "Approved" to 2026-04-13 17:18:42.825333467 +0000 UTC m=+400.376220751 I0413 17:18:43.231882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g4wjr" condition "Ready" to 2026-04-13 17:18:43.231868133 +0000 UTC m=+400.782755417 E0413 17:18:43.265256 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-4bskl\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0413 17:18:43.470949 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-g4wjr" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-wfr45" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0413 17:18:43.626498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j87ch" condition "Approved" to 2026-04-13 17:18:43.626484553 +0000 UTC m=+401.177371807 I0413 17:18:43.728503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j87ch" condition "Ready" to 2026-04-13 17:18:43.728484909 +0000 UTC m=+401.279372203 I0413 17:18:44.169837 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:44.1698231 +0000 UTC m=+401.720710394 I0413 17:18:44.269767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:44.270231 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:44.270223436 +0000 UTC m=+401.821110700 I0413 17:18:44.520766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:44.569930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:49.532160 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" condition "Ready" to 2026-04-13 17:18:49.532145846 +0000 UTC m=+407.083033110 I0413 17:18:49.532393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:49.532528 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" condition "Issuing" to 2026-04-13 17:18:49.532514425 +0000 UTC m=+407.083401719 I0413 17:18:49.549617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:49.549728 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" condition "Ready" to 2026-04-13 17:18:49.549717761 +0000 UTC m=+407.100605035 I0413 17:18:49.672061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:49.703736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x7fj7-8btkx" condition "Approved" to 2026-04-13 17:18:49.703727056 +0000 UTC m=+407.254614320 I0413 17:18:49.718929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x7fj7-8btkx" condition "Ready" to 2026-04-13 17:18:49.718918673 +0000 UTC m=+407.269805937 I0413 17:18:49.746295 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:49.746285903 +0000 UTC m=+407.297173147 I0413 17:18:49.766931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:49.767228 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:49.767220243 +0000 UTC m=+407.318107507 I0413 17:18:49.783593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x7fj7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:19:11.085504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:19:11.085603 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 17:19:11.085587613 +0000 UTC m=+428.636474917 I0413 17:19:11.085842 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 17:19:11.08582168 +0000 UTC m=+428.636708964 I0413 17:19:11.104507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:19:11.104633 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 17:19:11.104613206 +0000 UTC m=+428.655500470 I0413 17:19:11.199078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:19:11.228135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4qbmg" condition "Approved" to 2026-04-13 17:19:11.228117053 +0000 UTC m=+428.779004347 I0413 17:19:11.243831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4qbmg" condition "Ready" to 2026-04-13 17:19:11.243823404 +0000 UTC m=+428.794710648 I0413 17:19:11.279912 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:19:11.27989642 +0000 UTC m=+428.830783704 I0413 17:19:11.298747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:19:11.299034 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:19:11.299027434 +0000 UTC m=+428.849914688 I0413 17:19:11.330153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:38.901032 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 17:22:38.90099266 +0000 UTC m=+636.451879934 I0413 17:22:38.901047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:22:38.901119 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 17:22:38.901109413 +0000 UTC m=+636.451996697 I0413 17:22:38.916813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:38.917017 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 17:22:38.917003265 +0000 UTC m=+636.467890579 I0413 17:22:39.087699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:39.115941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jdvwn" condition "Approved" to 2026-04-13 17:22:39.11592458 +0000 UTC m=+636.666811874 I0413 17:22:39.130294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jdvwn" condition "Ready" to 2026-04-13 17:22:39.130286187 +0000 UTC m=+636.681173431 I0413 17:22:39.154655 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:22:39.154644449 +0000 UTC m=+636.705531713 I0413 17:22:39.173207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:39.173546 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:22:39.173539257 +0000 UTC m=+636.724426521 I0413 17:22:39.182856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:39.192740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:24:59.986197 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-13 17:24:59.986163429 +0000 UTC m=+777.537050713 I0413 17:24:59.986295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:24:59.986341 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-13 17:24:59.986336003 +0000 UTC m=+777.537223257 I0413 17:25:00.006256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:25:00.006334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:25:00.006348 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-13 17:25:00.00634421 +0000 UTC m=+777.557231464 I0413 17:25:00.277247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6bkz5" condition "Approved" to 2026-04-13 17:25:00.277233851 +0000 UTC m=+777.828121135 I0413 17:25:00.297782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6bkz5" condition "Ready" to 2026-04-13 17:25:00.297772791 +0000 UTC m=+777.848660045 I0413 17:25:00.336336 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:25:00.33632424 +0000 UTC m=+777.887211514 I0413 17:25:00.358656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:25:00.358922 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:25:00.358916841 +0000 UTC m=+777.909804095 I0413 17:25:00.380863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:01.635426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:26:01.635474 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 17:26:01.635464528 +0000 UTC m=+839.186351822 I0413 17:26:01.636166 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-13 17:26:01.636150785 +0000 UTC m=+839.187038079 I0413 17:26:01.651033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:01.651149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:26:01.651180 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 17:26:01.651171928 +0000 UTC m=+839.202059192 I0413 17:26:01.899383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:01.910309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qgf6w" condition "Approved" to 2026-04-13 17:26:01.910292913 +0000 UTC m=+839.461180177 I0413 17:26:01.929193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qgf6w" condition "Ready" to 2026-04-13 17:26:01.929180613 +0000 UTC m=+839.480067877 I0413 17:26:01.959606 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:26:01.959594138 +0000 UTC m=+839.510481392 I0413 17:26:01.979940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:01.980257 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:26:01.980252081 +0000 UTC m=+839.531139335 I0413 17:26:02.002390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:28:51.248624 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-13 17:28:51.248585062 +0000 UTC m=+1008.799472356 I0413 17:28:51.248677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:28:51.248715 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-13 17:28:51.248704095 +0000 UTC m=+1008.799591389 I0413 17:28:51.280015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:28:51.280081 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-13 17:28:51.280075274 +0000 UTC m=+1008.830962538 I0413 17:28:51.375004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:28:51.414534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2jvg5" condition "Approved" to 2026-04-13 17:28:51.414509805 +0000 UTC m=+1008.965397069 I0413 17:28:51.434171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2jvg5" condition "Ready" to 2026-04-13 17:28:51.434160033 +0000 UTC m=+1008.985047307 I0413 17:28:51.466242 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:28:51.46623001 +0000 UTC m=+1009.017117284 I0413 17:28:51.492066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"