I0330 10:28:23.737956 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0330 10:28:23.738127 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0330 10:28:23.738257 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0330 10:28:23.742284 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0330 10:28:23.742622 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0330 10:28:23.742716 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0330 10:28:23.742790 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0330 10:28:23.744988 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0330 10:28:23.763291 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0330 10:28:23.763565 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0330 10:28:23.768772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0330 10:28:23.773641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0330 10:28:23.778667 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0330 10:28:23.778770 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0330 10:28:23.781360 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0330 10:28:23.783657 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0330 10:28:23.786137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0330 10:28:23.788086 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0330 10:28:23.789898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0330 10:28:23.794926 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0330 10:28:23.794957 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0330 10:28:23.794994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0330 10:28:23.797827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0330 10:28:23.800082 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0330 10:28:23.802361 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0330 10:28:23.802384 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0330 10:28:23.802533 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0330 10:28:23.804940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0330 10:28:23.806706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0330 10:28:23.808374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0330 10:28:23.810272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0330 10:28:23.815528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0330 10:28:23.819824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0330 10:28:23.822511 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.822735 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.822849 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.823672 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.823981 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.824235 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.824264 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.824914 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.825301 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:23.915977 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 10:28:35.982132 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-30 10:28:35.982114085 +0000 UTC m=+12.274063830 I0330 10:28:36.651453 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-30 10:28:36.651430247 +0000 UTC m=+12.943379992 I0330 10:28:36.651623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:28:36.651762 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-30 10:28:36.651748812 +0000 UTC m=+12.943698557 I0330 10:28:36.666137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:28:36.666196 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-30 10:28:36.666189351 +0000 UTC m=+12.958139076 E0330 10:28:36.666298 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0330 10:28:36.666402 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-30 10:28:36.666394144 +0000 UTC m=+12.958343869 E0330 10:28:36.666462 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 10:28:36.684033 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0330 10:28:36.684163 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 10:28:36.684207 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 10:28:36.684262 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0330 10:28:36.688192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:28:36.708746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-22dx9" condition "Approved" to 2026-03-30 10:28:36.708724609 +0000 UTC m=+13.000674334 I0330 10:28:36.722289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-22dx9" condition "Ready" to 2026-03-30 10:28:36.722275311 +0000 UTC m=+13.014225056 I0330 10:28:36.744095 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:28:36.74408365 +0000 UTC m=+13.036033375 I0330 10:28:36.772084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:28:36.813510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:28:41.685758 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:28:41.685744542 +0000 UTC m=+17.977694287 I0330 10:29:02.512610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:29:02.512659 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-30 10:29:02.51248256 +0000 UTC m=+38.804432315 I0330 10:29:02.512658 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-30 10:29:02.512650063 +0000 UTC m=+38.804599788 I0330 10:29:02.522363 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-30 10:29:02.522349826 +0000 UTC m=+38.814299551 I0330 10:29:02.546422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:29:02.546563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:29:02.546619 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-30 10:29:02.546612492 +0000 UTC m=+38.838562197 I0330 10:29:02.801036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:29:02.810099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v9wdg" condition "Approved" to 2026-03-30 10:29:02.810080965 +0000 UTC m=+39.102030690 I0330 10:29:02.842125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-v9wdg" condition "Ready" to 2026-03-30 10:29:02.842104107 +0000 UTC m=+39.134053832 I0330 10:29:02.871064 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:29:02.871052272 +0000 UTC m=+39.163001987 I0330 10:29:02.891645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:29:02.944144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:36.889764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:30:36.889811 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-30 10:30:36.88979591 +0000 UTC m=+133.181745645 I0330 10:30:36.889986 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-30 10:30:36.889954913 +0000 UTC m=+133.181904658 E0330 10:30:36.906086 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0330 10:30:36.907661 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-30 10:30:36.907645896 +0000 UTC m=+133.199595651 I0330 10:30:36.907754 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0330 10:30:36.909243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:36.909351 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-30 10:30:36.909341187 +0000 UTC m=+133.201290952 E0330 10:30:36.916518 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0330 10:30:36.916636 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0330 10:30:36.916707 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0330 10:30:36.916754 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0330 10:30:36.921932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:30:36.921957 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-30 10:30:36.921950844 +0000 UTC m=+133.213900569 I0330 10:30:36.922131 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-30 10:30:36.922121338 +0000 UTC m=+133.214071053 I0330 10:30:36.937605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:36.937730 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-30 10:30:36.937716401 +0000 UTC m=+133.229666146 I0330 10:30:37.049723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:37.074150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pqb7m" condition "Approved" to 2026-03-30 10:30:37.074138337 +0000 UTC m=+133.366088042 I0330 10:30:37.096576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pqb7m" condition "Ready" to 2026-03-30 10:30:37.096565898 +0000 UTC m=+133.388515623 I0330 10:30:37.120984 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:30:37.120966708 +0000 UTC m=+133.412916453 I0330 10:30:37.139158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:37.186492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:37.225858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:37.253008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-nf5rp" condition "Approved" to 2026-03-30 10:30:37.252996761 +0000 UTC m=+133.544946486 I0330 10:30:37.270773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-nf5rp" condition "Ready" to 2026-03-30 10:30:37.270757465 +0000 UTC m=+133.562707220 I0330 10:30:41.917935 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:30:41.917913549 +0000 UTC m=+138.209863294 I0330 10:30:41.960493 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-nf5rp" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:30:41.960479619 +0000 UTC m=+138.252429364 I0330 10:30:42.032097 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:30:42.032078965 +0000 UTC m=+138.324028680 I0330 10:30:42.083141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:42.083553 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:30:42.083542743 +0000 UTC m=+138.375492468 I0330 10:30:42.148513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:42.153855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:30:42.154299 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:30:42.154288053 +0000 UTC m=+138.446237808 I0330 10:33:14.969226 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Ready" to 2026-03-30 10:33:14.96919561 +0000 UTC m=+291.261145355 I0330 10:33:14.969853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-124.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:33:14.969896 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Issuing" to 2026-03-30 10:33:14.969887513 +0000 UTC m=+291.261837238 I0330 10:33:14.985590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:33:14.985842 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Ready" to 2026-03-30 10:33:14.985681922 +0000 UTC m=+291.277631637 I0330 10:33:15.210963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:33:15.247793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-124.nip.io-tls-77zsh" condition "Approved" to 2026-03-30 10:33:15.24777827 +0000 UTC m=+291.539728015 I0330 10:33:15.270168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-124.nip.io-tls-77zsh" condition "Ready" to 2026-03-30 10:33:15.270153834 +0000 UTC m=+291.562103579 I0330 10:33:15.298511 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:33:15.29849056 +0000 UTC m=+291.590440315 I0330 10:33:15.333741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:33:15.334298 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:33:15.334286918 +0000 UTC m=+291.626236663 I0330 10:33:15.342586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-124.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-124.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:33:15.342742 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-124.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:33:15.342737928 +0000 UTC m=+291.634687643 I0330 10:34:32.463970 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-30 10:34:32.463926594 +0000 UTC m=+368.755876349 I0330 10:34:32.463991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:34:32.464045 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-30 10:34:32.464033556 +0000 UTC m=+368.755983311 E0330 10:34:32.508100 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0330 10:34:32.508170 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-30 10:34:32.508157947 +0000 UTC m=+368.800107702 E0330 10:34:32.508251 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0330 10:34:32.512167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:34:32.512352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:34:32.512415 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-30 10:34:32.512406077 +0000 UTC m=+368.804355812 E0330 10:34:32.538016 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0330 10:34:32.538138 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 10:34:32.538179 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 10:34:32.538246 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0330 10:34:32.599230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:34:32.599438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-l579w" condition "Approved" to 2026-03-30 10:34:32.599413576 +0000 UTC m=+368.891363361 I0330 10:34:32.632027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-l579w" condition "Ready" to 2026-03-30 10:34:32.632015559 +0000 UTC m=+368.923965284 I0330 10:34:32.664306 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:34:32.664289887 +0000 UTC m=+368.956239612 I0330 10:34:32.712149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:34:37.538628 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:34:37.538614567 +0000 UTC m=+373.830564322 I0330 10:35:15.154547 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-30 10:35:15.154533605 +0000 UTC m=+411.446483360 I0330 10:35:15.157439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:35:15.157485 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-30 10:35:15.1574767 +0000 UTC m=+411.449426435 I0330 10:35:15.163978 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-30 10:35:15.163960393 +0000 UTC m=+411.455910158 I0330 10:35:15.164225 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-30 10:35:15.164217027 +0000 UTC m=+411.456166742 I0330 10:35:15.166900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:35:15.166952 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-30 10:35:15.166943699 +0000 UTC m=+411.458893414 I0330 10:35:15.167138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:35:15.167173 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-30 10:35:15.167166373 +0000 UTC m=+411.459116098 I0330 10:35:15.191660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.191732 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-30 10:35:15.191725396 +0000 UTC m=+411.483675121 I0330 10:35:15.192256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.192296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:35:15.192313 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-30 10:35:15.192309046 +0000 UTC m=+411.484258761 I0330 10:35:15.196845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.196924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:35:15.196946 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-30 10:35:15.196938963 +0000 UTC m=+411.488888688 I0330 10:35:15.544181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.552564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-92wt4" condition "Approved" to 2026-03-30 10:35:15.55254798 +0000 UTC m=+411.844497705 I0330 10:35:15.572922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-92wt4" condition "Ready" to 2026-03-30 10:35:15.572912744 +0000 UTC m=+411.864862459 I0330 10:35:15.598356 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:15.598331782 +0000 UTC m=+411.890281497 I0330 10:35:15.612167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9ckfv" condition "Approved" to 2026-03-30 10:35:15.612150323 +0000 UTC m=+411.904100048 I0330 10:35:15.619374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.619752 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:15.619746585 +0000 UTC m=+411.911696310 I0330 10:35:15.645344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9ckfv" condition "Ready" to 2026-03-30 10:35:15.645329518 +0000 UTC m=+411.937279243 I0330 10:35:15.650267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.650662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.682061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.695162 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:15.695140965 +0000 UTC m=+411.987090710 I0330 10:35:15.846323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:15.846782 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:15.846773651 +0000 UTC m=+412.138723376 I0330 10:35:15.899351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pdpx4" condition "Approved" to 2026-03-30 10:35:15.899328901 +0000 UTC m=+412.191278636 I0330 10:35:16.100157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pdpx4" condition "Ready" to 2026-03-30 10:35:16.100145573 +0000 UTC m=+412.392095298 I0330 10:35:16.445597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:16.695365 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:16.695348571 +0000 UTC m=+412.987298316 I0330 10:35:16.800082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:17.095906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:22.956413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" condition "Ready" to 2026-03-30 10:35:22.956359079 +0000 UTC m=+419.248308804 I0330 10:35:22.956949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:35:22.956976 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" condition "Issuing" to 2026-03-30 10:35:22.956970502 +0000 UTC m=+419.248920227 I0330 10:35:22.974829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:22.974909 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" condition "Ready" to 2026-03-30 10:35:22.974901239 +0000 UTC m=+419.266850964 I0330 10:35:23.103714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:23.139196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9s4qq-cgzw6" condition "Approved" to 2026-03-30 10:35:23.139181036 +0000 UTC m=+419.431130761 I0330 10:35:23.159975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9s4qq-cgzw6" condition "Ready" to 2026-03-30 10:35:23.159964308 +0000 UTC m=+419.451914033 I0330 10:35:23.184861 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:23.184850797 +0000 UTC m=+419.476800522 I0330 10:35:23.221861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:23.222349 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:23.222337343 +0000 UTC m=+419.514287098 I0330 10:35:23.243791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9s4qq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:51.127996 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-30 10:35:51.127953378 +0000 UTC m=+447.419903123 I0330 10:35:51.128084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:35:51.128120 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-30 10:35:51.128111431 +0000 UTC m=+447.420061156 I0330 10:35:51.144090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:51.144159 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-30 10:35:51.144153624 +0000 UTC m=+447.436103339 I0330 10:35:51.340069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:51.369974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z76ff" condition "Approved" to 2026-03-30 10:35:51.36995895 +0000 UTC m=+447.661908675 I0330 10:35:51.391442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-z76ff" condition "Ready" to 2026-03-30 10:35:51.391430704 +0000 UTC m=+447.683380429 I0330 10:35:51.422235 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:51.422222104 +0000 UTC m=+447.714171819 I0330 10:35:51.438140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:51.438611 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:51.438603703 +0000 UTC m=+447.730553428 I0330 10:35:51.455911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:51.456246 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:35:51.456236735 +0000 UTC m=+447.748186460 I0330 10:35:51.456728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:35:51.461340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" E0330 10:38:23.059301 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out I0330 10:39:16.496549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:39:16.496633 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-30 10:39:16.496621831 +0000 UTC m=+652.788571586 I0330 10:39:16.496546 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-30 10:39:16.496505909 +0000 UTC m=+652.788455664 I0330 10:39:16.517423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:39:16.517512 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-30 10:39:16.517505015 +0000 UTC m=+652.809454730 I0330 10:39:16.752318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:39:16.785207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-k5vds" condition "Approved" to 2026-03-30 10:39:16.785195981 +0000 UTC m=+653.077145696 I0330 10:39:16.802883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-k5vds" condition "Ready" to 2026-03-30 10:39:16.802873205 +0000 UTC m=+653.094822930 I0330 10:39:16.833793 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:39:16.833784269 +0000 UTC m=+653.125733994 I0330 10:39:16.851928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:39:16.852099 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:39:16.852095574 +0000 UTC m=+653.144045289 I0330 10:39:16.873141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:39:16.876126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:42:11.998291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:42:11.998364 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-30 10:42:11.998335782 +0000 UTC m=+828.290285487 I0330 10:42:11.998694 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-30 10:42:11.998657868 +0000 UTC m=+828.290607613 I0330 10:42:12.021698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:42:12.021840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:42:12.021915 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-30 10:42:12.021866095 +0000 UTC m=+828.313815860 I0330 10:42:12.412021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:42:12.419160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tjmdx" condition "Approved" to 2026-03-30 10:42:12.419149609 +0000 UTC m=+828.711099334 I0330 10:42:12.434741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tjmdx" condition "Ready" to 2026-03-30 10:42:12.434728202 +0000 UTC m=+828.726677927 I0330 10:42:12.464587 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:42:12.464563405 +0000 UTC m=+828.756513160 I0330 10:42:12.490599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:42:12.491095 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:42:12.491087555 +0000 UTC m=+828.783037280 I0330 10:42:12.493339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:42:12.507476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:43:19.780335 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-30 10:43:19.780322861 +0000 UTC m=+896.072272576 I0330 10:43:19.780737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:43:19.780757 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-30 10:43:19.780753138 +0000 UTC m=+896.072702853 I0330 10:43:19.809108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:43:19.809195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:43:19.809216 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-30 10:43:19.809210776 +0000 UTC m=+896.101160491 I0330 10:43:20.145402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xm58b" condition "Approved" to 2026-03-30 10:43:20.145392848 +0000 UTC m=+896.437342573 I0330 10:43:20.165062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xm58b" condition "Ready" to 2026-03-30 10:43:20.16505163 +0000 UTC m=+896.457001365 I0330 10:43:20.190302 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:43:20.190284006 +0000 UTC m=+896.482233761 I0330 10:43:20.220040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:43:20.220394 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:43:20.220387806 +0000 UTC m=+896.512337531 I0330 10:43:20.243049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:43:20.243327 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:43:20.243320909 +0000 UTC m=+896.535270624 I0330 10:46:20.477196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 10:46:20.477221 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-30 10:46:20.477174301 +0000 UTC m=+1076.769124046 I0330 10:46:20.477286 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-30 10:46:20.477276572 +0000 UTC m=+1076.769226327 I0330 10:46:20.494595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:46:20.494692 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-30 10:46:20.494682722 +0000 UTC m=+1076.786632477 I0330 10:46:20.653988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:46:20.680270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zcbwn" condition "Approved" to 2026-03-30 10:46:20.680256276 +0000 UTC m=+1076.972206001 I0330 10:46:20.696868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zcbwn" condition "Ready" to 2026-03-30 10:46:20.69685389 +0000 UTC m=+1076.988803615 I0330 10:46:20.729946 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:46:20.729930505 +0000 UTC m=+1077.021880230 I0330 10:46:20.749657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:46:20.750107 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:46:20.750098275 +0000 UTC m=+1077.042048000 I0330 10:46:20.768180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 10:46:20.768448 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 10:46:20.768441392 +0000 UTC m=+1077.060391107