I0407 09:42:50.060325 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 09:42:50.060488 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 09:42:50.060606 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 09:42:50.065276 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 09:42:50.065644 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 09:42:50.065818 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 09:42:50.065863 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 09:42:50.068158 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 09:42:50.084387 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 09:42:50.090377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 09:42:50.090457 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 09:42:50.090842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 09:42:50.094907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 09:42:50.096674 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 09:42:50.098442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 09:42:50.100188 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 09:42:50.100301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 09:42:50.102066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 09:42:50.103790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 09:42:50.107863 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 09:42:50.107988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 09:42:50.112044 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 09:42:50.115564 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 09:42:50.118271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 09:42:50.119859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 09:42:50.121565 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 09:42:50.121600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 09:42:50.123324 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 09:42:50.123438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 09:42:50.125256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 09:42:50.132172 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 09:42:50.135335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 09:42:50.138631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 09:42:50.141092 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.141537 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.142858 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.159904 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.180723 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.198584 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.217012 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.232720 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.248445 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:42:50.262638 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 09:43:02.546983 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 09:43:02.546971671 +0000 UTC m=+12.517448236 I0407 09:43:03.252750 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:43:03.252830 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 09:43:03.252819961 +0000 UTC m=+13.223296546 I0407 09:43:03.253210 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 09:43:03.25319391 +0000 UTC m=+13.223670515 E0407 09:43:03.266499 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 09:43:03.266589 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 09:43:03.266580071 +0000 UTC m=+13.237056636 E0407 09:43:03.266813 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 09:43:03.268161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:43:03.268277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:43:03.268319 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 09:43:03.268309024 +0000 UTC m=+13.238785619 E0407 09:43:03.277912 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 09:43:03.278114 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 09:43:03.278172 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 09:43:03.278222 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 09:43:03.304767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x4g4n" condition "Approved" to 2026-04-07 09:43:03.304752296 +0000 UTC m=+13.275228891 I0407 09:43:03.317045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x4g4n" condition "Ready" to 2026-04-07 09:43:03.317034951 +0000 UTC m=+13.287511546 I0407 09:43:03.340747 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:43:03.340737047 +0000 UTC m=+13.311213612 I0407 09:43:03.359202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:43:08.278828 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:43:08.278809941 +0000 UTC m=+18.249286536 I0407 09:43:28.435596 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 09:43:28.43558373 +0000 UTC m=+38.406060305 I0407 09:43:28.435625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:43:28.435711 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 09:43:28.435698923 +0000 UTC m=+38.406175508 I0407 09:43:28.449059 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 09:43:28.449044117 +0000 UTC m=+38.419520692 I0407 09:43:28.459665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:43:28.459749 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 09:43:28.459721377 +0000 UTC m=+38.430197942 I0407 09:43:28.732477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:43:28.775344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8zk9j" condition "Approved" to 2026-04-07 09:43:28.775331816 +0000 UTC m=+38.745808381 I0407 09:43:28.808818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8zk9j" condition "Ready" to 2026-04-07 09:43:28.808806418 +0000 UTC m=+38.779282973 I0407 09:43:28.839485 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:43:28.839470093 +0000 UTC m=+38.809946688 I0407 09:43:28.860850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:43:28.913969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:12.075193 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 09:45:12.075178622 +0000 UTC m=+142.045655217 I0407 09:45:12.075360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:45:12.075411 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 09:45:12.075399497 +0000 UTC m=+142.045876092 E0407 09:45:12.088814 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 09:45:12.088916 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 09:45:12.088906576 +0000 UTC m=+142.059383141 I0407 09:45:12.088944 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 09:45:12.090172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:12.090289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:45:12.090317 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 09:45:12.09031043 +0000 UTC m=+142.060786985 E0407 09:45:12.096219 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 09:45:12.096553 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 09:45:12.096612 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 09:45:12.096688 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 09:45:12.104274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:45:12.104294 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 09:45:12.10428454 +0000 UTC m=+142.074761105 I0407 09:45:12.104314 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 09:45:12.10430686 +0000 UTC m=+142.074783425 I0407 09:45:12.119960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:12.120048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:45:12.120088 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 09:45:12.120081173 +0000 UTC m=+142.090557728 I0407 09:45:12.392296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:12.405184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-plkvs" condition "Approved" to 2026-04-07 09:45:12.40517152 +0000 UTC m=+142.375648115 I0407 09:45:12.434791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-plkvs" condition "Ready" to 2026-04-07 09:45:12.43477965 +0000 UTC m=+142.405256215 I0407 09:45:12.437471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:12.446211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rx2ds" condition "Approved" to 2026-04-07 09:45:12.446198257 +0000 UTC m=+142.416674822 I0407 09:45:12.462315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rx2ds" condition "Ready" to 2026-04-07 09:45:12.462293808 +0000 UTC m=+142.432770373 I0407 09:45:12.464305 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:45:12.464287757 +0000 UTC m=+142.434764322 I0407 09:45:12.483236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:12.483854 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:45:12.483841652 +0000 UTC m=+142.454318247 I0407 09:45:12.505184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:45:17.097333 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:45:17.097319297 +0000 UTC m=+147.067795882 I0407 09:45:17.111059 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-rx2ds" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:45:17.11104902 +0000 UTC m=+147.081525575 I0407 09:45:17.143660 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:45:17.143644292 +0000 UTC m=+147.114120857 I0407 09:45:17.162199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:47:50.258507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:47:50.258561 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Issuing" to 2026-04-07 09:47:50.25854978 +0000 UTC m=+300.229026375 I0407 09:47:50.258455 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready" to 2026-04-07 09:47:50.258435368 +0000 UTC m=+300.228911963 I0407 09:47:50.276702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:47:50.276804 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready" to 2026-04-07 09:47:50.276794852 +0000 UTC m=+300.247271437 I0407 09:47:50.418461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:47:50.449286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-kw47r" condition "Approved" to 2026-04-07 09:47:50.44926929 +0000 UTC m=+300.419745855 I0407 09:47:50.467174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-kw47r" condition "Ready" to 2026-04-07 09:47:50.467156712 +0000 UTC m=+300.437633347 I0407 09:47:50.494868 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:47:50.494855383 +0000 UTC m=+300.465331948 I0407 09:47:50.522303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:47:50.522792 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:47:50.522783449 +0000 UTC m=+300.493260034 I0407 09:47:50.536707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:47:50.537284 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:47:50.53726927 +0000 UTC m=+300.507745865 I0407 09:48:59.386206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:48:59.386242 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 09:48:59.386221167 +0000 UTC m=+369.356697762 I0407 09:48:59.386253 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 09:48:59.386242008 +0000 UTC m=+369.356718603 E0407 09:48:59.401840 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 09:48:59.401885 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 09:48:59.401878757 +0000 UTC m=+369.372355322 E0407 09:48:59.401926 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 09:48:59.404828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:48:59.404921 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 09:48:59.404906231 +0000 UTC m=+369.375382826 E0407 09:48:59.413339 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 09:48:59.413522 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 09:48:59.413629 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 09:48:59.413688 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 09:48:59.418495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:48:59.418590 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 09:48:59.418577013 +0000 UTC m=+369.389053598 I0407 09:48:59.425367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pwq4b" condition "Approved" to 2026-04-07 09:48:59.425348378 +0000 UTC m=+369.395824943 I0407 09:48:59.428684 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 09:48:59.428666429 +0000 UTC m=+369.399143024 I0407 09:48:59.436377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:48:59.438229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pwq4b" condition "Ready" to 2026-04-07 09:48:59.438221531 +0000 UTC m=+369.408698096 I0407 09:48:59.462657 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:48:59.462636565 +0000 UTC m=+369.433113130 I0407 09:48:59.480632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:48:59.480825 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:48:59.480819517 +0000 UTC m=+369.451296082 I0407 09:48:59.496743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:04.414408 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:49:04.414394603 +0000 UTC m=+374.384871198 I0407 09:49:42.780738 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 09:49:42.780727487 +0000 UTC m=+412.751204052 I0407 09:49:42.781102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:49:42.781236 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 09:49:42.781213968 +0000 UTC m=+412.751690533 I0407 09:49:42.781313 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 09:49:42.781307701 +0000 UTC m=+412.751784266 I0407 09:49:42.781463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:49:42.781543 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 09:49:42.781532026 +0000 UTC m=+412.752008581 I0407 09:49:42.785608 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 09:49:42.785602386 +0000 UTC m=+412.756078951 I0407 09:49:42.785816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:49:42.785836 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 09:49:42.785833131 +0000 UTC m=+412.756309686 I0407 09:49:42.821157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:42.821227 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 09:49:42.821216801 +0000 UTC m=+412.791693356 I0407 09:49:42.821848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:42.822030 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 09:49:42.822020671 +0000 UTC m=+412.792497236 I0407 09:49:42.822245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:42.822326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:49:42.823904 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 09:49:42.823882966 +0000 UTC m=+412.794359531 I0407 09:49:43.280400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:43.310751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2xcfh" condition "Approved" to 2026-04-07 09:49:43.310732762 +0000 UTC m=+413.281209327 I0407 09:49:43.338728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2xcfh" condition "Ready" to 2026-04-07 09:49:43.338713433 +0000 UTC m=+413.309189998 I0407 09:49:43.360260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:43.368463 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:49:43.368451626 +0000 UTC m=+413.338928181 I0407 09:49:43.394385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:43.397964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p52sj" condition "Approved" to 2026-04-07 09:49:43.397946063 +0000 UTC m=+413.368422628 I0407 09:49:43.428826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p52sj" condition "Ready" to 2026-04-07 09:49:43.428813434 +0000 UTC m=+413.399289989 I0407 09:49:43.436236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:43.453823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zbjhg" condition "Approved" to 2026-04-07 09:49:43.453810621 +0000 UTC m=+413.424287186 I0407 09:49:43.472376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zbjhg" condition "Ready" to 2026-04-07 09:49:43.472355842 +0000 UTC m=+413.442832437 I0407 09:49:43.678253 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:49:43.678239458 +0000 UTC m=+413.648716023 I0407 09:49:43.778318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:44.076767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:44.077390 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:49:44.077379802 +0000 UTC m=+414.047856387 I0407 09:49:44.132814 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:49:44.132791749 +0000 UTC m=+414.103268314 I0407 09:49:44.427472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:44.476430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:44.825901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:51.171806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:49:51.171902 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" condition "Issuing" to 2026-04-07 09:49:51.171888766 +0000 UTC m=+421.142365361 I0407 09:49:51.173072 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" condition "Ready" to 2026-04-07 09:49:51.173037443 +0000 UTC m=+421.143514028 I0407 09:49:51.193205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:51.193280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:49:51.193302 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" condition "Issuing" to 2026-04-07 09:49:51.193298316 +0000 UTC m=+421.163774881 I0407 09:49:51.695005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4zrjj-svgdq" condition "Approved" to 2026-04-07 09:49:51.694982243 +0000 UTC m=+421.665458838 I0407 09:49:51.717511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4zrjj-svgdq" condition "Ready" to 2026-04-07 09:49:51.71749655 +0000 UTC m=+421.687973125 I0407 09:49:51.787817 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:49:51.787800489 +0000 UTC m=+421.758277054 I0407 09:49:51.947669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:49:51.948108 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:49:51.948099717 +0000 UTC m=+421.918576282 I0407 09:49:52.012111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4zrjj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:50:16.098010 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 09:50:16.097987236 +0000 UTC m=+446.068463831 I0407 09:50:16.098104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:50:16.098179 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 09:50:16.09816305 +0000 UTC m=+446.068639645 I0407 09:50:16.114054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:50:16.114124 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 09:50:16.114116677 +0000 UTC m=+446.084593262 I0407 09:50:16.319483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:50:16.354030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4frp2" condition "Approved" to 2026-04-07 09:50:16.354014309 +0000 UTC m=+446.324490874 I0407 09:50:16.377012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4frp2" condition "Ready" to 2026-04-07 09:50:16.376995765 +0000 UTC m=+446.347472330 I0407 09:50:16.409119 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:50:16.409104023 +0000 UTC m=+446.379580578 I0407 09:50:16.434123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:50:16.434515 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:50:16.434506079 +0000 UTC m=+446.404982644 I0407 09:50:16.440191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:50:16.450648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:50:16.451079 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:50:16.451066429 +0000 UTC m=+446.421543014 I0407 09:50:16.451633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:53:33.196475 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 09:53:33.19646533 +0000 UTC m=+643.166941895 I0407 09:53:33.196655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:53:33.196751 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 09:53:33.196739466 +0000 UTC m=+643.167216061 I0407 09:53:33.214417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:53:33.214511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:53:33.214536 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 09:53:33.214529477 +0000 UTC m=+643.185006042 I0407 09:53:33.399940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:53:33.407329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lzjk9" condition "Approved" to 2026-04-07 09:53:33.407315983 +0000 UTC m=+643.377792548 I0407 09:53:33.423726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lzjk9" condition "Ready" to 2026-04-07 09:53:33.42371568 +0000 UTC m=+643.394192235 I0407 09:53:33.449649 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:53:33.449634238 +0000 UTC m=+643.420110823 I0407 09:53:33.477021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:53:33.477402 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:53:33.477393279 +0000 UTC m=+643.447869844 I0407 09:53:33.502421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:56:03.490247 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:56:03.490401 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 09:56:03.490389601 +0000 UTC m=+793.460866186 I0407 09:56:03.490882 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 09:56:03.490875252 +0000 UTC m=+793.461351807 I0407 09:56:03.507556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:56:03.507637 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 09:56:03.507629207 +0000 UTC m=+793.478105782 I0407 09:56:03.841592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:56:03.880762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kscwb" condition "Approved" to 2026-04-07 09:56:03.880743271 +0000 UTC m=+793.851219846 I0407 09:56:03.897432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kscwb" condition "Ready" to 2026-04-07 09:56:03.897419514 +0000 UTC m=+793.867896089 I0407 09:56:03.929698 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:56:03.929683445 +0000 UTC m=+793.900160000 I0407 09:56:03.952680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:56:03.952881 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:56:03.952875976 +0000 UTC m=+793.923352531 I0407 09:56:03.969852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:56:03.970737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:57:06.574412 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 09:57:06.574391765 +0000 UTC m=+856.544868360 I0407 09:57:06.574850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:57:06.574979 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 09:57:06.574964439 +0000 UTC m=+856.545441034 I0407 09:57:06.595194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:57:06.595307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 09:57:06.595339 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 09:57:06.595328812 +0000 UTC m=+856.565805397 I0407 09:57:06.810349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:57:06.822781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pv7j8" condition "Approved" to 2026-04-07 09:57:06.822763533 +0000 UTC m=+856.793240128 I0407 09:57:06.838237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pv7j8" condition "Ready" to 2026-04-07 09:57:06.838221816 +0000 UTC m=+856.808698391 I0407 09:57:06.864550 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:57:06.864536113 +0000 UTC m=+856.835012678 I0407 09:57:06.881635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 09:57:06.882042 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 09:57:06.882037036 +0000 UTC m=+856.852513591 I0407 09:57:06.903570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 10:00:06.737012 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 10:00:06.736996759 +0000 UTC m=+1036.707473344 I0407 10:00:06.737046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 10:00:06.737145 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 10:00:06.737093882 +0000 UTC m=+1036.707570467 I0407 10:00:06.755625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 10:00:06.755687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 10:00:06.755702 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 10:00:06.755697773 +0000 UTC m=+1036.726174338 I0407 10:00:07.019784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-ksqrt" condition "Approved" to 2026-04-07 10:00:07.019769737 +0000 UTC m=+1036.990246312 I0407 10:00:07.038791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-ksqrt" condition "Ready" to 2026-04-07 10:00:07.038783187 +0000 UTC m=+1037.009259752 I0407 10:00:07.067553 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 10:00:07.067541754 +0000 UTC m=+1037.038018319 I0407 10:00:07.096043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 10:00:07.096480 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 10:00:07.096471835 +0000 UTC m=+1037.066948410 I0407 10:00:07.114775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 10:00:07.115857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 10:00:07.116276 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 10:00:07.116266554 +0000 UTC m=+1037.086743119