I0402 21:25:55.549088 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 21:25:55.549187 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 21:25:55.549295 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 21:25:55.555301 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 21:25:55.555798 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 21:25:55.555904 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 21:25:55.555979 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 21:25:55.558648 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 21:25:55.588818 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 21:25:55.593105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 21:25:55.596192 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 21:25:55.602106 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 21:25:55.602157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 21:25:55.606645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 21:25:55.609592 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 21:25:55.612402 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 21:25:55.615145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 21:25:55.616782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 21:25:55.619758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 21:25:55.625945 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 21:25:55.625994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 21:25:55.625999 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 21:25:55.630023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 21:25:55.632158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 21:25:55.634121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 21:25:55.635783 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 21:25:55.635806 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 21:25:55.635870 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 21:25:55.637658 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 21:25:55.637869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 21:25:55.639428 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 21:25:55.641212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 21:25:55.648233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 21:25:55.651383 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.652019 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.652758 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.652570 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.670160 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.690267 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.708321 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.728450 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.744539 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:55.758174 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:26:12.288918 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 21:26:12.288888608 +0000 UTC m=+16.770056233 I0402 21:26:13.002428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:26:13.002494 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 21:26:13.00248713 +0000 UTC m=+17.483654715 I0402 21:26:13.002597 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 21:26:13.002579072 +0000 UTC m=+17.483746717 E0402 21:26:13.110215 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:26:13.110405 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 21:26:13.110390398 +0000 UTC m=+17.591558023 E0402 21:26:13.110470 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:26:13.115002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:13.115246 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 21:26:13.115129022 +0000 UTC m=+17.596296637 E0402 21:26:13.126125 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 21:26:13.126338 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:26:13.126426 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:26:13.126503 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 21:26:13.154509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:13.183233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fzr8p" condition "Approved" to 2026-04-02 21:26:13.183218228 +0000 UTC m=+17.664385843 I0402 21:26:13.197206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fzr8p" condition "Ready" to 2026-04-02 21:26:13.197192092 +0000 UTC m=+17.678359707 I0402 21:26:13.224482 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:13.224467724 +0000 UTC m=+17.705635319 I0402 21:26:13.239005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:13.239929 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:13.239916223 +0000 UTC m=+17.721083818 I0402 21:26:13.256106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:18.126796 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:18.126777916 +0000 UTC m=+22.607945531 I0402 21:26:42.149452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:26:42.149516 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 21:26:42.149508135 +0000 UTC m=+46.630675720 I0402 21:26:42.149465 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 21:26:42.149438094 +0000 UTC m=+46.630605729 I0402 21:26:42.167456 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 21:26:42.167439794 +0000 UTC m=+46.648607419 I0402 21:26:42.176919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:42.177001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:26:42.177027 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 21:26:42.177020993 +0000 UTC m=+46.658188598 I0402 21:26:42.274935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:42.282350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t2mmc" condition "Approved" to 2026-04-02 21:26:42.28233396 +0000 UTC m=+46.763501575 I0402 21:26:42.317502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t2mmc" condition "Ready" to 2026-04-02 21:26:42.317484479 +0000 UTC m=+46.798652094 I0402 21:26:42.346782 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:26:42.346767129 +0000 UTC m=+46.827934734 I0402 21:26:42.364441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:26:42.414539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:26.723489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:28:26.723492 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-02 21:28:26.72344576 +0000 UTC m=+151.204613385 I0402 21:28:26.723539 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 21:28:26.723526542 +0000 UTC m=+151.204694167 E0402 21:28:26.739059 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 21:28:26.739120 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-02 21:28:26.739113005 +0000 UTC m=+151.220280600 I0402 21:28:26.739140 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 21:28:26.741438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:26.741504 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-02 21:28:26.741496794 +0000 UTC m=+151.222664389 E0402 21:28:26.747069 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0402 21:28:26.747590 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 21:28:26.747622 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 21:28:26.747675 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0402 21:28:26.750628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:28:26.750634 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 21:28:26.750617957 +0000 UTC m=+151.231785552 I0402 21:28:26.750653 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-02 21:28:26.750647308 +0000 UTC m=+151.231814893 I0402 21:28:26.766120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:26.766200 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 21:28:26.766191241 +0000 UTC m=+151.247358826 I0402 21:28:26.984960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:27.014091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-fw59m" condition "Approved" to 2026-04-02 21:28:27.014073853 +0000 UTC m=+151.495241458 I0402 21:28:27.033983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-fw59m" condition "Ready" to 2026-04-02 21:28:27.033964352 +0000 UTC m=+151.515131947 I0402 21:28:27.135087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:27.162893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-96d2g" condition "Approved" to 2026-04-02 21:28:27.162873651 +0000 UTC m=+151.644041246 I0402 21:28:27.190698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-96d2g" condition "Ready" to 2026-04-02 21:28:27.190683534 +0000 UTC m=+151.671851129 I0402 21:28:27.224687 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:28:27.22466993 +0000 UTC m=+151.705837545 I0402 21:28:27.245851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:27.246254 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:28:27.24624808 +0000 UTC m=+151.727415665 I0402 21:28:27.264953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:31.748498 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:28:31.748487261 +0000 UTC m=+156.229654866 I0402 21:28:31.769498 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-fw59m" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:28:31.769483547 +0000 UTC m=+156.250651172 I0402 21:28:31.797089 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:28:31.797074886 +0000 UTC m=+156.278242501 I0402 21:28:31.816490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:31.817021 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:28:31.817013665 +0000 UTC m=+156.298181270 I0402 21:28:31.832757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:31.834393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:28:31.834740 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:28:31.834730911 +0000 UTC m=+156.315898506 I0402 21:31:08.616208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-123.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:31:08.616335 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Issuing" to 2026-04-02 21:31:08.616326982 +0000 UTC m=+313.097494577 I0402 21:31:08.616222 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready" to 2026-04-02 21:31:08.616178888 +0000 UTC m=+313.097346513 I0402 21:31:08.633073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:31:08.633167 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready" to 2026-04-02 21:31:08.633157205 +0000 UTC m=+313.114324830 I0402 21:31:08.746962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:31:08.775475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-123.nip.io-tls-k29pq" condition "Approved" to 2026-04-02 21:31:08.77546242 +0000 UTC m=+313.256630035 I0402 21:31:08.794368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-123.nip.io-tls-k29pq" condition "Ready" to 2026-04-02 21:31:08.794353044 +0000 UTC m=+313.275520659 I0402 21:31:08.821237 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:31:08.821224503 +0000 UTC m=+313.302392098 I0402 21:31:08.841337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:31:08.841702 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:31:08.841693517 +0000 UTC m=+313.322861112 I0402 21:31:08.859459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:31:08.859735 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:31:08.859728139 +0000 UTC m=+313.340895734 I0402 21:31:08.862745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:20.335153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:20.335190 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 21:32:20.335142349 +0000 UTC m=+384.816310024 I0402 21:32:20.335235 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 21:32:20.33522342 +0000 UTC m=+384.816391035 I0402 21:32:20.348408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:20.348529 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 21:32:20.348520445 +0000 UTC m=+384.829688040 E0402 21:32:20.351612 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:32:20.351670 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 21:32:20.351658701 +0000 UTC m=+384.832826326 E0402 21:32:20.351741 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:32:20.360571 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 21:32:20.360696 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:32:20.360749 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:32:20.360803 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 21:32:20.365375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:20.384833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xbplj" condition "Approved" to 2026-04-02 21:32:20.38481298 +0000 UTC m=+384.865980605 I0402 21:32:20.396445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xbplj" condition "Ready" to 2026-04-02 21:32:20.396434954 +0000 UTC m=+384.877602549 I0402 21:32:20.421523 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:20.421510035 +0000 UTC m=+384.902677630 I0402 21:32:20.472276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:25.361260 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:25.361244919 +0000 UTC m=+389.842412544 I0402 21:33:05.889140 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 21:33:05.889121456 +0000 UTC m=+430.370289081 I0402 21:33:05.889779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:05.889840 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 21:33:05.889832833 +0000 UTC m=+430.371000458 I0402 21:33:05.890151 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 21:33:05.89014459 +0000 UTC m=+430.371312215 I0402 21:33:05.890432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:05.890446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 21:33:05.890443897 +0000 UTC m=+430.371611482 I0402 21:33:05.891262 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 21:33:05.891246967 +0000 UTC m=+430.372414552 I0402 21:33:05.891637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:05.891658 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 21:33:05.891654258 +0000 UTC m=+430.372821843 I0402 21:33:05.913852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:05.913958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:05.914003 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 21:33:05.913995052 +0000 UTC m=+430.395162627 I0402 21:33:05.918946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:05.919026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:05.919053 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 21:33:05.919047085 +0000 UTC m=+430.400214670 I0402 21:33:05.926015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:05.926149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:05.926182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 21:33:05.926174829 +0000 UTC m=+430.407342424 I0402 21:33:06.089308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:06.097857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vlwxc" condition "Approved" to 2026-04-02 21:33:06.097823565 +0000 UTC m=+430.578991160 I0402 21:33:06.121704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vlwxc" condition "Ready" to 2026-04-02 21:33:06.121678608 +0000 UTC m=+430.602846233 I0402 21:33:06.132316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:06.140415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5qn72" condition "Approved" to 2026-04-02 21:33:06.140400454 +0000 UTC m=+430.621568069 I0402 21:33:06.151186 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:06.151173397 +0000 UTC m=+430.632341022 I0402 21:33:06.159716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5qn72" condition "Ready" to 2026-04-02 21:33:06.159706435 +0000 UTC m=+430.640874040 I0402 21:33:06.177832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:06.178382 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:06.17837003 +0000 UTC m=+430.659537625 I0402 21:33:06.193741 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:06.193718924 +0000 UTC m=+430.674886549 I0402 21:33:06.207166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:06.207506 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:06.20749671 +0000 UTC m=+430.688664305 I0402 21:33:06.278498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:06.278868 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:06.278860921 +0000 UTC m=+430.760028516 I0402 21:33:06.718370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:06.767474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:06.825162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9b7jh" condition "Approved" to 2026-04-02 21:33:06.825150426 +0000 UTC m=+431.306318011 I0402 21:33:07.024578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9b7jh" condition "Ready" to 2026-04-02 21:33:07.02456705 +0000 UTC m=+431.505734655 I0402 21:33:07.421194 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:07.421175354 +0000 UTC m=+431.902342969 I0402 21:33:07.520188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:07.520793 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:07.520781673 +0000 UTC m=+432.001949288 I0402 21:33:07.769698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:07.819706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:15.451638 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" condition "Ready" to 2026-04-02 21:33:15.451621894 +0000 UTC m=+439.932789479 I0402 21:33:15.451912 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:15.451957 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" condition "Issuing" to 2026-04-02 21:33:15.451946272 +0000 UTC m=+439.933113887 I0402 21:33:15.465388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:15.465610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:15.465647 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" condition "Issuing" to 2026-04-02 21:33:15.465638006 +0000 UTC m=+439.946805631 I0402 21:33:15.649011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:15.660112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h7wkl-54ncg" condition "Approved" to 2026-04-02 21:33:15.66009637 +0000 UTC m=+440.141263965 I0402 21:33:15.678012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h7wkl-54ncg" condition "Ready" to 2026-04-02 21:33:15.678001266 +0000 UTC m=+440.159168861 I0402 21:33:15.701850 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:15.701836947 +0000 UTC m=+440.183004542 I0402 21:33:15.717845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:15.718227 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:15.718219097 +0000 UTC m=+440.199386692 I0402 21:33:15.735747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:15.741509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h7wkl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:45.684444 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 21:33:45.684425674 +0000 UTC m=+470.165593269 I0402 21:33:45.684859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:33:45.684885 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 21:33:45.684879565 +0000 UTC m=+470.166047160 I0402 21:33:45.702359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:45.702574 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 21:33:45.70256274 +0000 UTC m=+470.183730355 I0402 21:33:45.961652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:45.991669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-glmnl" condition "Approved" to 2026-04-02 21:33:45.990931357 +0000 UTC m=+470.472098982 I0402 21:33:46.008635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-glmnl" condition "Ready" to 2026-04-02 21:33:46.008617851 +0000 UTC m=+470.489785446 I0402 21:33:46.041198 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:46.041177451 +0000 UTC m=+470.522345066 I0402 21:33:46.065126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:46.065555 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:33:46.065546868 +0000 UTC m=+470.546714453 I0402 21:33:46.077295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:33:46.087921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:37:08.137474 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 21:37:08.137458413 +0000 UTC m=+672.618626008 I0402 21:37:08.137572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:37:08.137668 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 21:37:08.137657948 +0000 UTC m=+672.618825573 I0402 21:37:08.152278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:37:08.152387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:37:08.152413 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 21:37:08.152405191 +0000 UTC m=+672.633572786 I0402 21:37:08.538987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pj6sn" condition "Approved" to 2026-04-02 21:37:08.53897032 +0000 UTC m=+673.020137945 I0402 21:37:08.566222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pj6sn" condition "Ready" to 2026-04-02 21:37:08.56620545 +0000 UTC m=+673.047373075 I0402 21:37:08.593588 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:37:08.593570414 +0000 UTC m=+673.074738009 I0402 21:37:08.614223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:37:08.663454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:39:30.140017 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 21:39:30.140000664 +0000 UTC m=+814.621168259 I0402 21:39:30.140687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:39:30.140728 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 21:39:30.140717691 +0000 UTC m=+814.621885316 I0402 21:39:30.157285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:39:30.157389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:39:30.157417 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 21:39:30.157410545 +0000 UTC m=+814.638578140 I0402 21:39:30.529336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8j8v7" condition "Approved" to 2026-04-02 21:39:30.52931678 +0000 UTC m=+815.010484375 I0402 21:39:30.555156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8j8v7" condition "Ready" to 2026-04-02 21:39:30.555141184 +0000 UTC m=+815.036308779 I0402 21:39:30.583082 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:39:30.583068209 +0000 UTC m=+815.064235824 I0402 21:39:30.607711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:40:37.989785 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 21:40:37.989773131 +0000 UTC m=+882.470940716 I0402 21:40:37.990250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:40:37.991749 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 21:40:37.991743668 +0000 UTC m=+882.472911253 I0402 21:40:38.007885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:40:38.007994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:40:38.008023 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 21:40:38.008014581 +0000 UTC m=+882.489182206 I0402 21:40:38.278445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:40:38.288931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9b9vp" condition "Approved" to 2026-04-02 21:40:38.288919529 +0000 UTC m=+882.770087114 I0402 21:40:38.309010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9b9vp" condition "Ready" to 2026-04-02 21:40:38.308995744 +0000 UTC m=+882.790163349 I0402 21:40:38.340837 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:40:38.340821242 +0000 UTC m=+882.821988857 I0402 21:40:38.364651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:40:38.364963 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:40:38.364955086 +0000 UTC m=+882.846122671 I0402 21:40:38.389155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:43:42.962266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:43:42.962262 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 21:43:42.96223899 +0000 UTC m=+1067.443406625 I0402 21:43:42.962315 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 21:43:42.962307191 +0000 UTC m=+1067.443474816 I0402 21:43:42.979923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:43:42.980013 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 21:43:42.980006147 +0000 UTC m=+1067.461173742 I0402 21:43:43.166348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:43:43.200967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4kzkb" condition "Approved" to 2026-04-02 21:43:43.200949524 +0000 UTC m=+1067.682117119 I0402 21:43:43.217079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4kzkb" condition "Ready" to 2026-04-02 21:43:43.217067951 +0000 UTC m=+1067.698235546 I0402 21:43:43.244157 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:43:43.244142118 +0000 UTC m=+1067.725309713 I0402 21:43:43.266585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:43:43.266929 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:43:43.26692055 +0000 UTC m=+1067.748088135 I0402 21:43:43.290703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"