I0331 01:20:01.138169 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0331 01:20:01.138363 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0331 01:20:01.138471 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 01:20:01.142749 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0331 01:20:01.143514 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0331 01:20:01.143687 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0331 01:20:01.143705 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0331 01:20:01.146652 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 01:20:01.163432 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0331 01:20:01.168708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0331 01:20:01.176047 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0331 01:20:01.179479 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0331 01:20:01.179529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0331 01:20:01.182240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0331 01:20:01.184858 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0331 01:20:01.184884 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0331 01:20:01.184894 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0331 01:20:01.184903 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0331 01:20:01.184912 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0331 01:20:01.184991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0331 01:20:01.187793 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0331 01:20:01.190453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0331 01:20:01.196357 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0331 01:20:01.200432 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0331 01:20:01.203842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0331 01:20:01.207525 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0331 01:20:01.211118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0331 01:20:01.214542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0331 01:20:01.216992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0331 01:20:01.218859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0331 01:20:01.224041 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0331 01:20:01.227676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0331 01:20:01.230841 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0331 01:20:01.233634 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.233952 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.234252 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.234795 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.249178 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.270466 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.282182 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.300048 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.319761 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:01.329494 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 01:20:13.905213 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-31 01:20:13.90519501 +0000 UTC m=+12.801155951 I0331 01:20:14.655072 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 01:20:14.655052606 +0000 UTC m=+13.551013557 I0331 01:20:14.656501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:20:14.656571 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-31 01:20:14.656560372 +0000 UTC m=+13.552521283 E0331 01:20:14.670485 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 01:20:14.672307 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-31 01:20:14.672293987 +0000 UTC m=+13.568254898 E0331 01:20:14.672340 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 01:20:14.680410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:20:14.680547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:20:14.680605 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-31 01:20:14.680592284 +0000 UTC m=+13.576553225 E0331 01:20:14.690771 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0331 01:20:14.690878 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 01:20:14.690913 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 01:20:14.690954 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0331 01:20:14.722518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:20:14.729382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6j8kw" condition "Approved" to 2026-03-31 01:20:14.729365785 +0000 UTC m=+13.625326716 I0331 01:20:14.740791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6j8kw" condition "Ready" to 2026-03-31 01:20:14.740778307 +0000 UTC m=+13.636739218 I0331 01:20:14.765948 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:20:14.765932555 +0000 UTC m=+13.661893496 I0331 01:20:14.789570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:20:14.789899 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:20:14.789892146 +0000 UTC m=+13.685853047 I0331 01:20:14.804696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:20:14.805058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:20:14.805390 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:20:14.805378554 +0000 UTC m=+13.701339465 I0331 01:20:19.691848 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:20:19.691801426 +0000 UTC m=+18.587762357 I0331 01:20:42.364748 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-31 01:20:42.364717229 +0000 UTC m=+41.260678170 I0331 01:20:42.364831 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:20:42.364871 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-31 01:20:42.364862303 +0000 UTC m=+41.260823214 I0331 01:20:42.373955 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-31 01:20:42.373945329 +0000 UTC m=+41.269906240 I0331 01:20:42.385159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:20:42.385244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:20:42.385272 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-31 01:20:42.385263319 +0000 UTC m=+41.281224230 I0331 01:20:42.552844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:20:42.560689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dcr95" condition "Approved" to 2026-03-31 01:20:42.560679394 +0000 UTC m=+41.456640315 I0331 01:20:42.593435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dcr95" condition "Ready" to 2026-03-31 01:20:42.593415803 +0000 UTC m=+41.489376744 I0331 01:20:42.628319 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:20:42.628298053 +0000 UTC m=+41.524258994 I0331 01:20:42.654112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:20:42.716693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:22:30.438797 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-31 01:22:30.43877733 +0000 UTC m=+149.334738271 I0331 01:22:30.439176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:22:30.439251 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-31 01:22:30.439237471 +0000 UTC m=+149.335198402 E0331 01:22:30.457097 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 01:22:30.457174 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-31 01:22:30.457166875 +0000 UTC m=+149.353127776 I0331 01:22:30.457197 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 01:22:30.460433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:22:30.460545 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-31 01:22:30.460532735 +0000 UTC m=+149.356493636 E0331 01:22:30.469816 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0331 01:22:30.469968 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 01:22:30.470013 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0331 01:22:30.470069 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0331 01:22:30.472013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:22:30.472045 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-31 01:22:30.472034806 +0000 UTC m=+149.367995717 I0331 01:22:30.472182 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-31 01:22:30.47216924 +0000 UTC m=+149.368130151 I0331 01:22:30.490686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:22:30.490834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:22:30.490883 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-31 01:22:30.490873932 +0000 UTC m=+149.386834843 I0331 01:22:30.592897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:22:30.623010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4h8mh" condition "Approved" to 2026-03-31 01:22:30.622987565 +0000 UTC m=+149.518948516 I0331 01:22:30.641330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4h8mh" condition "Ready" to 2026-03-31 01:22:30.641314538 +0000 UTC m=+149.537275469 I0331 01:22:30.749955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:22:30.784383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-4cqjg" condition "Approved" to 2026-03-31 01:22:30.78437056 +0000 UTC m=+149.680331491 I0331 01:22:30.817663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-4cqjg" condition "Ready" to 2026-03-31 01:22:30.817650636 +0000 UTC m=+149.713611567 I0331 01:22:30.847845 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:22:30.84783371 +0000 UTC m=+149.743794641 I0331 01:22:30.870027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:22:35.471435 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:22:35.471417774 +0000 UTC m=+154.367378715 I0331 01:22:35.487117 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-4h8mh" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:22:35.487101615 +0000 UTC m=+154.383062516 I0331 01:22:35.515695 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:22:35.515673411 +0000 UTC m=+154.411634342 I0331 01:22:35.540758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:22:35.588570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:25:18.737545 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready" to 2026-03-31 01:25:18.737527419 +0000 UTC m=+317.633488330 I0331 01:25:18.737869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-36.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:25:18.737911 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Issuing" to 2026-03-31 01:25:18.737904708 +0000 UTC m=+317.633865619 I0331 01:25:18.756702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:25:18.756804 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready" to 2026-03-31 01:25:18.756791994 +0000 UTC m=+317.652752925 I0331 01:25:18.938746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:25:18.976123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-36.nip.io-tls-jgpjs" condition "Approved" to 2026-03-31 01:25:18.97610355 +0000 UTC m=+317.872064461 I0331 01:25:18.998713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-36.nip.io-tls-jgpjs" condition "Ready" to 2026-03-31 01:25:18.998699414 +0000 UTC m=+317.894660325 I0331 01:25:19.032129 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:25:19.032107395 +0000 UTC m=+317.928068336 I0331 01:25:19.052257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:25:19.052662 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:25:19.05265546 +0000 UTC m=+317.948616401 I0331 01:25:19.073938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:25:19.078225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:25:19.078627 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:25:19.078617374 +0000 UTC m=+317.974578285 I0331 01:26:31.409808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:26:31.409860 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-31 01:26:31.409847209 +0000 UTC m=+390.305808140 I0331 01:26:31.410140 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-31 01:26:31.410120085 +0000 UTC m=+390.306081026 E0331 01:26:31.422275 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 01:26:31.422349 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-31 01:26:31.422333394 +0000 UTC m=+390.318294345 E0331 01:26:31.422434 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 01:26:31.426555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:26:31.426622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:26:31.426649 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-31 01:26:31.426642506 +0000 UTC m=+390.322603417 E0331 01:26:31.433107 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0331 01:26:31.433248 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 01:26:31.433283 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 01:26:31.433348 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0331 01:26:31.457522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:26:31.460311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cbvfs" condition "Approved" to 2026-03-31 01:26:31.46029573 +0000 UTC m=+390.356256641 I0331 01:26:31.472073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cbvfs" condition "Ready" to 2026-03-31 01:26:31.472058678 +0000 UTC m=+390.368019599 I0331 01:26:31.492788 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:26:31.492780647 +0000 UTC m=+390.388741558 I0331 01:26:31.506526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:26:31.506983 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:26:31.506973753 +0000 UTC m=+390.402934664 I0331 01:26:31.521711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:26:31.522520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:26:36.434328 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:26:36.434312719 +0000 UTC m=+395.330273660 I0331 01:27:14.355403 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-31 01:27:14.35538856 +0000 UTC m=+433.251349461 I0331 01:27:14.356455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:27:14.356493 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-31 01:27:14.356485225 +0000 UTC m=+433.252446126 I0331 01:27:14.363188 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-31 01:27:14.363166003 +0000 UTC m=+433.259126914 I0331 01:27:14.363879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:27:14.363910 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-31 01:27:14.363904171 +0000 UTC m=+433.259865092 I0331 01:27:14.364234 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-31 01:27:14.364226498 +0000 UTC m=+433.260187419 I0331 01:27:14.364482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:27:14.364550 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 01:27:14.364540056 +0000 UTC m=+433.260500957 I0331 01:27:14.382944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:14.383022 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-31 01:27:14.383012162 +0000 UTC m=+433.278973073 I0331 01:27:14.385971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:14.385994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:14.386041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:27:14.386062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:27:14.386098 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 01:27:14.386092005 +0000 UTC m=+433.282052916 I0331 01:27:14.386065 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-31 01:27:14.386057054 +0000 UTC m=+433.282017975 I0331 01:27:14.505154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:14.541947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rc88l" condition "Approved" to 2026-03-31 01:27:14.541928897 +0000 UTC m=+433.437889838 I0331 01:27:14.550296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8nzb8" condition "Approved" to 2026-03-31 01:27:14.550289295 +0000 UTC m=+433.446250206 I0331 01:27:14.562244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rc88l" condition "Ready" to 2026-03-31 01:27:14.562227007 +0000 UTC m=+433.458187918 I0331 01:27:14.571137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8nzb8" condition "Ready" to 2026-03-31 01:27:14.571118957 +0000 UTC m=+433.467079898 I0331 01:27:14.590011 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:27:14.589994543 +0000 UTC m=+433.485955454 I0331 01:27:14.596586 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:27:14.596540228 +0000 UTC m=+433.492501149 I0331 01:27:14.617503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:14.617955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:14.618808 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:27:14.618792953 +0000 UTC m=+433.514753864 I0331 01:27:14.619171 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:27:14.619164932 +0000 UTC m=+433.515125853 I0331 01:27:14.938953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:14.993209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:15.045520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:15.090376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:15.389765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:15.448703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v85gp" condition "Approved" to 2026-03-31 01:27:15.448680802 +0000 UTC m=+434.344641713 I0331 01:27:15.751580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v85gp" condition "Ready" to 2026-03-31 01:27:15.751562709 +0000 UTC m=+434.647523610 I0331 01:27:15.992092 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:27:15.992067451 +0000 UTC m=+434.888028392 I0331 01:27:16.091074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:16.091519 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:27:16.091508261 +0000 UTC m=+434.987469192 I0331 01:27:16.291002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:18.986578 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls" condition "Ready" to 2026-03-31 01:27:18.986555784 +0000 UTC m=+437.882516695 I0331 01:27:18.986851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:27:18.986921 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls" condition "Issuing" to 2026-03-31 01:27:18.986907482 +0000 UTC m=+437.882868423 I0331 01:27:19.000091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:19.000193 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls" condition "Ready" to 2026-03-31 01:27:19.000178116 +0000 UTC m=+437.896139097 I0331 01:27:19.135498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:19.166652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fp7fj-7qq8q" condition "Approved" to 2026-03-31 01:27:19.166628439 +0000 UTC m=+438.062589380 I0331 01:27:19.188208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fp7fj-7qq8q" condition "Ready" to 2026-03-31 01:27:19.188187168 +0000 UTC m=+438.084148109 I0331 01:27:19.393561 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:27:19.39354245 +0000 UTC m=+438.289503381 I0331 01:27:19.413913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fp7fj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:53.707837 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-31 01:27:53.707816036 +0000 UTC m=+472.603776947 I0331 01:27:53.707887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:27:53.708083 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-31 01:27:53.707923719 +0000 UTC m=+472.603884640 I0331 01:27:53.795826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:27:53.796003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:27:53.796041 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-31 01:27:53.79602842 +0000 UTC m=+472.691989351 I0331 01:27:54.107124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w77hv" condition "Approved" to 2026-03-31 01:27:54.107103648 +0000 UTC m=+473.003064589 I0331 01:27:54.127019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w77hv" condition "Ready" to 2026-03-31 01:27:54.127001938 +0000 UTC m=+473.022962879 I0331 01:27:54.158470 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:27:54.15844764 +0000 UTC m=+473.054408571 I0331 01:27:54.180215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:31:14.588070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:31:14.588161 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-31 01:31:14.588151248 +0000 UTC m=+673.484112179 I0331 01:31:14.588095 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-31 01:31:14.588073157 +0000 UTC m=+673.484034068 I0331 01:31:14.605636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:31:14.605731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:31:14.605763 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-31 01:31:14.605752804 +0000 UTC m=+673.501713735 I0331 01:31:14.848064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:31:14.855693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nswfw" condition "Approved" to 2026-03-31 01:31:14.855681253 +0000 UTC m=+673.751642164 I0331 01:31:14.874996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nswfw" condition "Ready" to 2026-03-31 01:31:14.87498682 +0000 UTC m=+673.770947721 I0331 01:31:14.901283 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:31:14.901271211 +0000 UTC m=+673.797232112 I0331 01:31:14.921140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:31:14.980028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:33:41.768930 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-31 01:33:41.768908617 +0000 UTC m=+820.664869558 I0331 01:33:41.769019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:33:41.769322 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-31 01:33:41.769244915 +0000 UTC m=+820.665205866 I0331 01:33:41.785616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:33:41.785698 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-31 01:33:41.785691094 +0000 UTC m=+820.681652025 I0331 01:33:41.987495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:33:42.012694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-799zd" condition "Approved" to 2026-03-31 01:33:42.01268358 +0000 UTC m=+820.908644491 I0331 01:33:42.032107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-799zd" condition "Ready" to 2026-03-31 01:33:42.032096779 +0000 UTC m=+820.928057690 I0331 01:33:42.062458 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:33:42.062379305 +0000 UTC m=+820.958340246 I0331 01:33:42.081872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:33:42.082228 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:33:42.082220824 +0000 UTC m=+820.978181735 I0331 01:33:42.100042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:33:42.101645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:34:50.643838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:34:50.643907 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-31 01:34:50.643900109 +0000 UTC m=+889.539861020 I0331 01:34:50.643949 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-31 01:34:50.64392376 +0000 UTC m=+889.539884691 I0331 01:34:50.659042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:34:50.659112 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-31 01:34:50.659104278 +0000 UTC m=+889.555065179 I0331 01:34:50.914855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:34:50.946917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bk6bs" condition "Approved" to 2026-03-31 01:34:50.94690595 +0000 UTC m=+889.842866851 I0331 01:34:50.967635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bk6bs" condition "Ready" to 2026-03-31 01:34:50.967622439 +0000 UTC m=+889.863583350 I0331 01:34:50.995559 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:34:50.995545649 +0000 UTC m=+889.891506560 I0331 01:34:51.015128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:34:51.015477 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:34:51.015471599 +0000 UTC m=+889.911432510 I0331 01:34:51.027551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:34:51.044835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:37:53.087528 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-31 01:37:53.087509546 +0000 UTC m=+1071.983470477 I0331 01:37:53.087630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 01:37:53.087677 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-31 01:37:53.087672549 +0000 UTC m=+1071.983633450 I0331 01:37:53.105784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:37:53.106104 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-31 01:37:53.106092005 +0000 UTC m=+1072.002052946 I0331 01:37:53.311076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:37:53.342975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-s4sm2" condition "Approved" to 2026-03-31 01:37:53.342791467 +0000 UTC m=+1072.238752398 I0331 01:37:53.359271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-s4sm2" condition "Ready" to 2026-03-31 01:37:53.359260736 +0000 UTC m=+1072.255221637 I0331 01:37:53.402777 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 01:37:53.402764164 +0000 UTC m=+1072.298725065 I0331 01:37:53.425022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 01:37:53.473140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"