I0314 07:03:21.543265 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0314 07:03:21.543398 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0314 07:03:21.543494 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0314 07:03:21.548173 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0314 07:03:21.548633 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0314 07:03:21.548742 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0314 07:03:21.548788 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0314 07:03:21.552351 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0314 07:03:21.636018 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0314 07:03:21.636264 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0314 07:03:21.636307 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0314 07:03:21.642814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0314 07:03:21.648075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0314 07:03:21.650636 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0314 07:03:21.653009 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0314 07:03:21.653072 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0314 07:03:21.655397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0314 07:03:21.658433 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0314 07:03:21.661317 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0314 07:03:21.661497 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0314 07:03:21.668026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0314 07:03:21.671097 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0314 07:03:21.673073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0314 07:03:21.674804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0314 07:03:21.674929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0314 07:03:21.678497 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0314 07:03:21.683649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0314 07:03:21.686495 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0314 07:03:21.689480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0314 07:03:21.695644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0314 07:03:21.699518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0314 07:03:21.701579 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0314 07:03:21.702195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0314 07:03:21.703687 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.705774 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.706256 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.706539 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.707014 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.707652 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.707848 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.708018 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.708387 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:21.741841 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:03:34.080794 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-14 07:03:34.080774803 +0000 UTC m=+12.574668829 I0314 07:03:34.905214 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:03:34.905272 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-14 07:03:34.90525235 +0000 UTC m=+13.399146376 I0314 07:03:34.905277 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-14 07:03:34.90526519 +0000 UTC m=+13.399159216 E0314 07:03:34.936527 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0314 07:03:34.936630 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-14 07:03:34.936619521 +0000 UTC m=+13.430513547 E0314 07:03:34.936662 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0314 07:03:34.941508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:03:34.941605 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-14 07:03:34.941594092 +0000 UTC m=+13.435488118 E0314 07:03:35.113376 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0314 07:03:35.113494 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:03:35.113537 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:03:35.113585 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0314 07:03:35.199139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:03:35.386815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w2vx9" condition "Approved" to 2026-03-14 07:03:35.386801802 +0000 UTC m=+13.880695818 I0314 07:03:35.537799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w2vx9" condition "Ready" to 2026-03-14 07:03:35.537783737 +0000 UTC m=+14.031677753 I0314 07:03:35.684696 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:03:35.684677279 +0000 UTC m=+14.178571305 I0314 07:03:35.754104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:03:35.754679 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:03:35.754668874 +0000 UTC m=+14.248562900 I0314 07:03:35.811607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:03:40.113928 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:03:40.113911839 +0000 UTC m=+18.607805855 I0314 07:04:07.706710 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:04:07.706814 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-14 07:04:07.706802805 +0000 UTC m=+46.200696801 I0314 07:04:07.706931 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-14 07:04:07.706907907 +0000 UTC m=+46.200801963 I0314 07:04:07.789126 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-14 07:04:07.789108794 +0000 UTC m=+46.283002810 I0314 07:04:07.795169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:04:07.795325 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-14 07:04:07.795311003 +0000 UTC m=+46.289205029 I0314 07:04:08.034192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:04:08.129513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mwdk5" condition "Approved" to 2026-03-14 07:04:08.129496452 +0000 UTC m=+46.623390468 I0314 07:04:08.169588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mwdk5" condition "Ready" to 2026-03-14 07:04:08.169567467 +0000 UTC m=+46.663461463 I0314 07:04:08.274355 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:04:08.274330269 +0000 UTC m=+46.768224265 I0314 07:04:08.324723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:04:08.325419 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:04:08.325408381 +0000 UTC m=+46.819302377 I0314 07:04:08.355193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:02.328389 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-14 07:06:02.328355178 +0000 UTC m=+160.822249194 I0314 07:06:02.328418 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:06:02.328477 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-14 07:06:02.328468951 +0000 UTC m=+160.822362977 E0314 07:06:02.342217 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0314 07:06:02.342312 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-14 07:06:02.342303601 +0000 UTC m=+160.836197597 I0314 07:06:02.342359 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0314 07:06:02.345197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:02.345273 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-14 07:06:02.345265653 +0000 UTC m=+160.839159649 E0314 07:06:02.351482 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0314 07:06:02.351594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0314 07:06:02.351619 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0314 07:06:02.351693 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0314 07:06:02.356911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:06:02.356967 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-14 07:06:02.356953401 +0000 UTC m=+160.850847447 I0314 07:06:02.357281 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-14 07:06:02.357266308 +0000 UTC m=+160.851160304 I0314 07:06:02.374521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:02.374635 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-14 07:06:02.374622815 +0000 UTC m=+160.868516831 I0314 07:06:02.543342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:02.566545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:02.583994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dczlz" condition "Approved" to 2026-03-14 07:06:02.583979558 +0000 UTC m=+161.077873574 I0314 07:06:02.599274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dczlz" condition "Ready" to 2026-03-14 07:06:02.599260834 +0000 UTC m=+161.093154830 I0314 07:06:02.601583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-kxx74" condition "Approved" to 2026-03-14 07:06:02.601570451 +0000 UTC m=+161.095464437 I0314 07:06:02.657255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-kxx74" condition "Ready" to 2026-03-14 07:06:02.657243529 +0000 UTC m=+161.151137525 I0314 07:06:02.685484 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:02.685466922 +0000 UTC m=+161.179360948 I0314 07:06:02.704581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:02.705074 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:02.705063573 +0000 UTC m=+161.198957589 I0314 07:06:02.721585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:07.352700 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:07.352685682 +0000 UTC m=+165.846579698 I0314 07:06:07.368798 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-dczlz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:07.368781487 +0000 UTC m=+165.862675473 I0314 07:06:07.396026 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:07.396000466 +0000 UTC m=+165.889894462 I0314 07:06:07.418820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:07.419408 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:07.419397411 +0000 UTC m=+165.913291407 I0314 07:06:07.434347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:07.434665 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:07.434656466 +0000 UTC m=+165.928550462 I0314 07:09:13.673106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-109.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:09:13.673154 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Issuing" to 2026-03-14 07:09:13.673144564 +0000 UTC m=+352.167038560 I0314 07:09:13.673787 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-03-14 07:09:13.673780559 +0000 UTC m=+352.167674555 I0314 07:09:13.688879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:09:13.688958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-109.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:09:13.688977 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Issuing" to 2026-03-14 07:09:13.688969243 +0000 UTC m=+352.182863239 I0314 07:09:13.804408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-d2gvw" condition "Approved" to 2026-03-14 07:09:13.804381506 +0000 UTC m=+352.298275532 I0314 07:09:13.822801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-d2gvw" condition "Ready" to 2026-03-14 07:09:13.822788262 +0000 UTC m=+352.316682258 I0314 07:09:13.850787 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:09:13.850764106 +0000 UTC m=+352.344658122 I0314 07:09:13.873724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:10:26.876329 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-14 07:10:26.87627191 +0000 UTC m=+425.370165936 I0314 07:10:26.876371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:10:26.876510 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-14 07:10:26.876455624 +0000 UTC m=+425.370349620 E0314 07:10:26.892409 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0314 07:10:26.893228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:10:26.893309 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-14 07:10:26.893301635 +0000 UTC m=+425.387195661 I0314 07:10:26.892538 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-14 07:10:26.892526378 +0000 UTC m=+425.386420404 E0314 07:10:26.893591 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:10:26.903321 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0314 07:10:26.903429 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:10:26.903471 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:10:26.903518 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0314 07:10:26.911110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:10:26.933328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rbbrk" condition "Approved" to 2026-03-14 07:10:26.933311912 +0000 UTC m=+425.427205908 I0314 07:10:26.947746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rbbrk" condition "Ready" to 2026-03-14 07:10:26.947727528 +0000 UTC m=+425.441621534 I0314 07:10:26.970537 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:10:26.970521295 +0000 UTC m=+425.464415311 I0314 07:10:26.991906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:10:26.992398 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:10:26.992385619 +0000 UTC m=+425.486279645 I0314 07:10:26.999954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:10:27.012352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:10:31.904469 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:10:31.904451059 +0000 UTC m=+430.398345075 I0314 07:11:11.725522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:11:11.725596 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-14 07:11:11.725587613 +0000 UTC m=+470.219481609 I0314 07:11:11.726186 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-14 07:11:11.726161206 +0000 UTC m=+470.220055192 I0314 07:11:11.733440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:11:11.733486 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-14 07:11:11.733463901 +0000 UTC m=+470.227357907 I0314 07:11:11.733701 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-14 07:11:11.733696137 +0000 UTC m=+470.227590123 I0314 07:11:11.734032 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:11:11.734050 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-14 07:11:11.734047554 +0000 UTC m=+470.227941540 I0314 07:11:11.734230 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-14 07:11:11.734226578 +0000 UTC m=+470.228120564 I0314 07:11:11.765191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:11.765277 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-14 07:11:11.765269151 +0000 UTC m=+470.259163137 I0314 07:11:11.775610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:11.775674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:11:11.775702 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-14 07:11:11.775693387 +0000 UTC m=+470.269587373 I0314 07:11:11.780535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:11.787461 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-14 07:11:11.787441753 +0000 UTC m=+470.281335729 I0314 07:11:11.913510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:11.954654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lmq26" condition "Approved" to 2026-03-14 07:11:11.95463987 +0000 UTC m=+470.448533866 I0314 07:11:12.014813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lmq26" condition "Ready" to 2026-03-14 07:11:12.014801461 +0000 UTC m=+470.508695437 I0314 07:11:12.164943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:12.189846 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:11:12.189824195 +0000 UTC m=+470.683718191 I0314 07:11:12.348677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:12.349099 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:11:12.349092712 +0000 UTC m=+470.842986698 I0314 07:11:12.470120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7nz8l" condition "Approved" to 2026-03-14 07:11:12.470102132 +0000 UTC m=+470.963996158 I0314 07:11:12.475420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:12.481163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:12.484580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:12.490181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7nz8l" condition "Ready" to 2026-03-14 07:11:12.490168516 +0000 UTC m=+470.984062492 I0314 07:11:12.623425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xfkwf" condition "Approved" to 2026-03-14 07:11:12.623405793 +0000 UTC m=+471.117299789 I0314 07:11:12.720482 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:11:12.720467221 +0000 UTC m=+471.214361207 I0314 07:11:12.777667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xfkwf" condition "Ready" to 2026-03-14 07:11:12.777650596 +0000 UTC m=+471.271544592 I0314 07:11:13.199919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:13.423776 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-xfkwf" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-7bcmz" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0314 07:11:13.629201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qwctr" condition "Approved" to 2026-03-14 07:11:13.629176579 +0000 UTC m=+472.123070605 I0314 07:11:14.035687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qwctr" condition "Ready" to 2026-03-14 07:11:14.035670923 +0000 UTC m=+472.529564939 I0314 07:11:14.404006 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:11:14.403975723 +0000 UTC m=+472.897869749 I0314 07:11:14.434008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:14.434503 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:11:14.434490154 +0000 UTC m=+472.928384170 I0314 07:11:14.668427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:14.718635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:25.406212 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" condition "Ready" to 2026-03-14 07:11:25.406187401 +0000 UTC m=+483.900081397 I0314 07:11:25.406226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:11:25.406411 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" condition "Issuing" to 2026-03-14 07:11:25.406391456 +0000 UTC m=+483.900285472 I0314 07:11:25.423471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qvztn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:25.423808 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" condition "Ready" to 2026-03-14 07:11:25.42379749 +0000 UTC m=+483.917691516 I0314 07:11:25.607285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qvztn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:25.641601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qvztn-jtwtf" condition "Approved" to 2026-03-14 07:11:25.641572411 +0000 UTC m=+484.135466397 I0314 07:11:25.663252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qvztn-jtwtf" condition "Ready" to 2026-03-14 07:11:25.663233031 +0000 UTC m=+484.157127057 I0314 07:11:25.693224 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:11:25.69321022 +0000 UTC m=+484.187104216 I0314 07:11:25.717313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qvztn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:25.718350 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:11:25.718331219 +0000 UTC m=+484.212225205 I0314 07:11:25.724940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qvztn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:25.738827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qvztn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qvztn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:12:07.715273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:12:07.715313 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-14 07:12:07.715302662 +0000 UTC m=+526.209196658 I0314 07:12:07.715724 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-14 07:12:07.715711431 +0000 UTC m=+526.209605457 I0314 07:12:07.952066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:12:07.952152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:12:07.952175 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-14 07:12:07.952166925 +0000 UTC m=+526.446060921 I0314 07:12:08.363717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-289zk" condition "Approved" to 2026-03-14 07:12:08.363697895 +0000 UTC m=+526.857591891 I0314 07:12:08.389003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-289zk" condition "Ready" to 2026-03-14 07:12:08.388984217 +0000 UTC m=+526.882878243 I0314 07:12:08.453253 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:12:08.453237872 +0000 UTC m=+526.947131868 I0314 07:12:08.524261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:12:08.524672 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:12:08.524664949 +0000 UTC m=+527.018558935 I0314 07:12:08.558539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:36.174361 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-14 07:15:36.174321447 +0000 UTC m=+734.668215473 I0314 07:15:36.174451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:15:36.174718 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-14 07:15:36.174688105 +0000 UTC m=+734.668582131 I0314 07:15:36.194613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:36.194744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:15:36.194770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-14 07:15:36.194763113 +0000 UTC m=+734.688657099 I0314 07:15:36.382051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-t26x7" condition "Approved" to 2026-03-14 07:15:36.382031883 +0000 UTC m=+734.875925879 I0314 07:15:36.416001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-t26x7" condition "Ready" to 2026-03-14 07:15:36.415986801 +0000 UTC m=+734.909880797 I0314 07:15:36.480475 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:15:36.48045962 +0000 UTC m=+734.974353616 I0314 07:15:36.559215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:36.559958 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:15:36.559948274 +0000 UTC m=+735.053842300 I0314 07:15:36.594787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:36.595093 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:15:36.595083788 +0000 UTC m=+735.088977784 I0314 07:18:06.661327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:18:06.661409 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-14 07:18:06.661399932 +0000 UTC m=+885.155293928 I0314 07:18:06.661503 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-14 07:18:06.661477444 +0000 UTC m=+885.155371460 I0314 07:18:06.681295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:18:06.681378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:18:06.681401 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-14 07:18:06.681394 +0000 UTC m=+885.175288006 I0314 07:18:06.941953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pcq42" condition "Approved" to 2026-03-14 07:18:06.941939019 +0000 UTC m=+885.435833015 I0314 07:18:06.964128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pcq42" condition "Ready" to 2026-03-14 07:18:06.964115686 +0000 UTC m=+885.458009672 I0314 07:18:06.994367 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:18:06.994348552 +0000 UTC m=+885.488242578 I0314 07:18:07.020169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:18:07.023722 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:18:07.023711249 +0000 UTC m=+885.517605235 I0314 07:18:07.027509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:18:07.043499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:18:07.044011 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:18:07.043998803 +0000 UTC m=+885.537892829 I0314 07:19:24.973494 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-14 07:19:24.973474733 +0000 UTC m=+963.467368729 I0314 07:19:24.975515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:19:24.975558 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-14 07:19:24.975553458 +0000 UTC m=+963.469447474 I0314 07:19:24.997035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:19:24.997225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:19:24.997265 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-14 07:19:24.997254994 +0000 UTC m=+963.491148990 I0314 07:19:25.302558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-nbmzz" condition "Approved" to 2026-03-14 07:19:25.302544505 +0000 UTC m=+963.796438501 I0314 07:19:25.321865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-nbmzz" condition "Ready" to 2026-03-14 07:19:25.321852537 +0000 UTC m=+963.815746533 I0314 07:19:25.355234 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:19:25.355222264 +0000 UTC m=+963.849116260 I0314 07:19:25.384527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:19:25.384876 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:19:25.384869107 +0000 UTC m=+963.878763083 I0314 07:19:25.389035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:19:25.406066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:22:45.733311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:22:45.733450 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-14 07:22:45.733434791 +0000 UTC m=+1164.227328837 I0314 07:22:45.733573 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-14 07:22:45.733549803 +0000 UTC m=+1164.227443829 I0314 07:22:45.754613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:22:45.754781 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-14 07:22:45.754769858 +0000 UTC m=+1164.248663854 I0314 07:22:45.995562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:22:46.028488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wvxxv" condition "Approved" to 2026-03-14 07:22:46.028464911 +0000 UTC m=+1164.522358917 I0314 07:22:46.044137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wvxxv" condition "Ready" to 2026-03-14 07:22:46.044126771 +0000 UTC m=+1164.538020757 I0314 07:22:46.079311 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:22:46.07928955 +0000 UTC m=+1164.573183576 I0314 07:22:46.111097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:22:46.111761 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:22:46.111747968 +0000 UTC m=+1164.605642024 I0314 07:22:46.115954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:22:46.130149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:22:46.137866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:22:46.138305 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:22:46.138294962 +0000 UTC m=+1164.632188948