I0412 20:53:46.768208 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0412 20:53:46.768410 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0412 20:53:46.768511 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0412 20:53:46.776110 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0412 20:53:46.776805 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0412 20:53:46.777068 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0412 20:53:46.777079 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0412 20:53:46.781139 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0412 20:53:46.798497 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0412 20:53:46.802151 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0412 20:53:46.805700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0412 20:53:46.812361 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0412 20:53:46.812410 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0412 20:53:46.812478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0412 20:53:46.816666 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0412 20:53:46.820278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0412 20:53:46.822341 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0412 20:53:46.824224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0412 20:53:46.826185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0412 20:53:46.828812 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0412 20:53:46.829176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0412 20:53:46.834294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0412 20:53:46.837309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0412 20:53:46.839760 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0412 20:53:46.842366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0412 20:53:46.844745 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0412 20:53:46.844776 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0412 20:53:46.844788 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0412 20:53:46.844809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0412 20:53:46.847443 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0412 20:53:46.849406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0412 20:53:46.851325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0412 20:53:46.858106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0412 20:53:46.860807 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.861187 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.861488 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.861924 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.861933 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.861961 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.862712 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.863010 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.863798 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:46.949648 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:53:59.185730 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-12 20:53:59.185714945 +0000 UTC m=+12.451085826 I0412 20:53:59.927404 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 20:53:59.927383558 +0000 UTC m=+13.192754429 I0412 20:53:59.927499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:53:59.927573 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 20:53:59.927565042 +0000 UTC m=+13.192935893 E0412 20:53:59.941698 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:53:59.941924 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-12 20:53:59.941917197 +0000 UTC m=+13.207288048 E0412 20:53:59.941948 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:53:59.946893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:59.946973 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 20:53:59.946965181 +0000 UTC m=+13.212336032 E0412 20:53:59.952656 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0412 20:53:59.952762 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:53:59.952797 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:53:59.952828 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0412 20:53:59.961798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:59.961911 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 20:53:59.961900558 +0000 UTC m=+13.227271409 I0412 20:53:59.963395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:53:59.969323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xmb5w" condition "Approved" to 2026-04-12 20:53:59.969311206 +0000 UTC m=+13.234682057 I0412 20:53:59.975150 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 20:53:59.975141248 +0000 UTC m=+13.240512119 I0412 20:53:59.981994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xmb5w" condition "Ready" to 2026-04-12 20:53:59.981986232 +0000 UTC m=+13.247357083 I0412 20:53:59.989259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:00.006793 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:54:00.006783063 +0000 UTC m=+13.272153914 I0412 20:54:00.024238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:04.954082 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:54:04.954040123 +0000 UTC m=+18.219410994 I0412 20:54:25.263808 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 20:54:25.263792158 +0000 UTC m=+38.529163009 I0412 20:54:25.264602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:54:25.264639 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 20:54:25.264626956 +0000 UTC m=+38.529997807 I0412 20:54:25.280140 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-12 20:54:25.280125527 +0000 UTC m=+38.545496408 I0412 20:54:25.293118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:25.293324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:54:25.293399 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 20:54:25.293389457 +0000 UTC m=+38.558760338 I0412 20:54:25.439233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:25.446509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t7qg5" condition "Approved" to 2026-04-12 20:54:25.446500859 +0000 UTC m=+38.711871700 I0412 20:54:25.475397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t7qg5" condition "Ready" to 2026-04-12 20:54:25.475378873 +0000 UTC m=+38.740749764 I0412 20:54:25.506231 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:54:25.50621692 +0000 UTC m=+38.771587771 I0412 20:54:25.534555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:54:25.582029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:12.185315 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:56:12.185361 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 20:56:12.185350031 +0000 UTC m=+145.450720902 I0412 20:56:12.185472 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-12 20:56:12.185448153 +0000 UTC m=+145.450819034 E0412 20:56:12.199515 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 20:56:12.199596 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-12 20:56:12.199582214 +0000 UTC m=+145.464953105 I0412 20:56:12.199654 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 20:56:12.203876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:12.203979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:56:12.204018 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 20:56:12.204009694 +0000 UTC m=+145.469380545 E0412 20:56:12.212181 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0412 20:56:12.212415 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 20:56:12.212455 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0412 20:56:12.212552 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0412 20:56:12.212553 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:56:12.212585 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 20:56:12.212576599 +0000 UTC m=+145.477947460 I0412 20:56:12.212617 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-12 20:56:12.212598149 +0000 UTC m=+145.477969030 I0412 20:56:12.228450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:12.228561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:56:12.228603 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 20:56:12.228593493 +0000 UTC m=+145.493964334 I0412 20:56:12.386711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-42n2f" condition "Approved" to 2026-04-12 20:56:12.386676785 +0000 UTC m=+145.652047676 I0412 20:56:12.391170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:12.395224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jszgh" condition "Approved" to 2026-04-12 20:56:12.395216419 +0000 UTC m=+145.660587290 I0412 20:56:12.407892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-42n2f" condition "Ready" to 2026-04-12 20:56:12.407881206 +0000 UTC m=+145.673252037 I0412 20:56:12.421567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jszgh" condition "Ready" to 2026-04-12 20:56:12.421553737 +0000 UTC m=+145.686924588 I0412 20:56:12.447962 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:56:12.447948636 +0000 UTC m=+145.713319497 I0412 20:56:12.469498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:17.213329 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:56:17.213320258 +0000 UTC m=+150.478691109 I0412 20:56:17.229944 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-42n2f" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:56:17.229924744 +0000 UTC m=+150.495295595 I0412 20:56:17.257133 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:56:17.257117932 +0000 UTC m=+150.522488783 I0412 20:56:17.276228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:17.276803 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:56:17.276792699 +0000 UTC m=+150.542163580 I0412 20:56:17.295140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:17.295480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:17.301070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:58:49.849770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Ready" to 2026-04-12 20:58:49.849754646 +0000 UTC m=+303.115125527 I0412 20:58:49.849837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-105.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:58:49.849862 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Issuing" to 2026-04-12 20:58:49.849855208 +0000 UTC m=+303.115226059 I0412 20:58:49.871716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:58:49.871806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-105.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:58:49.871832 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Issuing" to 2026-04-12 20:58:49.871824145 +0000 UTC m=+303.137195026 I0412 20:58:50.184844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-105.nip.io-tls-s4xzz" condition "Approved" to 2026-04-12 20:58:50.184831162 +0000 UTC m=+303.450202023 I0412 20:58:50.229533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-105.nip.io-tls-s4xzz" condition "Ready" to 2026-04-12 20:58:50.229517241 +0000 UTC m=+303.494888122 I0412 20:58:50.262474 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:58:50.262458955 +0000 UTC m=+303.527829836 I0412 20:58:50.305842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:58:50.306147 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:58:50.306140722 +0000 UTC m=+303.571511573 I0412 20:58:50.321697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-105.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-105.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:58:50.322020 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-105.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:58:50.32201273 +0000 UTC m=+303.587383581 I0412 21:00:00.404389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:00.404764 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 21:00:00.404504894 +0000 UTC m=+373.669875765 I0412 21:00:00.404879 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 21:00:00.404194737 +0000 UTC m=+373.669565608 E0412 21:00:00.417359 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 21:00:00.417426 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-12 21:00:00.417413994 +0000 UTC m=+373.682784845 E0412 21:00:00.417520 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 21:00:00.417846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:00.417948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:00.417976 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 21:00:00.417968347 +0000 UTC m=+373.683339198 E0412 21:00:00.425561 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0412 21:00:00.425660 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 21:00:00.425695 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 21:00:00.425733 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0412 21:00:00.457295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:00.460100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9p4mk" condition "Approved" to 2026-04-12 21:00:00.460087818 +0000 UTC m=+373.725458669 I0412 21:00:00.473485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9p4mk" condition "Ready" to 2026-04-12 21:00:00.47346628 +0000 UTC m=+373.738837131 I0412 21:00:00.496607 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:00.496592703 +0000 UTC m=+373.761963554 I0412 21:00:00.512829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:00.513198 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:00.513187146 +0000 UTC m=+373.778557997 I0412 21:00:00.531521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:05.426660 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:05.426647177 +0000 UTC m=+378.692018018 I0412 21:00:43.438479 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 21:00:43.438435057 +0000 UTC m=+416.703805898 I0412 21:00:43.439123 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 21:00:43.439110303 +0000 UTC m=+416.704481144 I0412 21:00:43.439762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:43.440144 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 21:00:43.440138766 +0000 UTC m=+416.705509607 I0412 21:00:43.439777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:43.443719 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 21:00:43.443714816 +0000 UTC m=+416.709085657 I0412 21:00:43.443449 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 21:00:43.44343695 +0000 UTC m=+416.708807791 I0412 21:00:43.443540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:43.443972 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 21:00:43.443968332 +0000 UTC m=+416.709339163 I0412 21:00:43.470657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:43.470803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:43.470841 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 21:00:43.470833369 +0000 UTC m=+416.736204220 I0412 21:00:43.471149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:43.471221 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 21:00:43.471212897 +0000 UTC m=+416.736583748 I0412 21:00:43.473931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:43.473988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:43.474005 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 21:00:43.4740001 +0000 UTC m=+416.739370941 I0412 21:00:43.627035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:43.678605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4x6mt" condition "Approved" to 2026-04-12 21:00:43.678582739 +0000 UTC m=+416.943953610 I0412 21:00:43.702207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4x6mt" condition "Ready" to 2026-04-12 21:00:43.702191312 +0000 UTC m=+416.967562163 I0412 21:00:43.773369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:43.773427 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 21:00:43.77341507 +0000 UTC m=+417.038785941 I0412 21:00:43.773851 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:43.773836819 +0000 UTC m=+417.039207650 I0412 21:00:43.795167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:43.795542 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:43.795533219 +0000 UTC m=+417.060904070 I0412 21:00:43.805489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:43.833141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-67s9n" condition "Approved" to 2026-04-12 21:00:43.833130427 +0000 UTC m=+417.098501258 I0412 21:00:43.859116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-67s9n" condition "Ready" to 2026-04-12 21:00:43.859100944 +0000 UTC m=+417.124471795 I0412 21:00:43.862048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:43.862602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fz9b9" condition "Approved" to 2026-04-12 21:00:43.862590823 +0000 UTC m=+417.127961674 I0412 21:00:44.136078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fz9b9" condition "Ready" to 2026-04-12 21:00:44.136066016 +0000 UTC m=+417.401436867 I0412 21:00:44.727912 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:44.727899747 +0000 UTC m=+417.993270578 I0412 21:00:44.816505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-29zlq" condition "Approved" to 2026-04-12 21:00:44.816491377 +0000 UTC m=+418.081862238 I0412 21:00:44.976868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:44.977475 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:44.977459971 +0000 UTC m=+418.242830842 I0412 21:00:45.039879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-29zlq" condition "Ready" to 2026-04-12 21:00:45.039861319 +0000 UTC m=+418.305232200 I0412 21:00:45.773793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:45.825264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:45.899429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:45.927760 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:45.927743363 +0000 UTC m=+419.193114234 I0412 21:00:46.076680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:46.077275 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:46.077262888 +0000 UTC m=+419.342633759 I0412 21:00:46.278489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:51.504584 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:00:51.504646 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" condition "Issuing" to 2026-04-12 21:00:51.504634921 +0000 UTC m=+424.770005792 I0412 21:00:51.505217 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" condition "Ready" to 2026-04-12 21:00:51.505198984 +0000 UTC m=+424.770569835 I0412 21:00:51.521940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qrq84-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:51.522247 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" condition "Ready" to 2026-04-12 21:00:51.522232178 +0000 UTC m=+424.787603069 I0412 21:00:51.992412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qrq84-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:52.038609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qrq84-xbgs2" condition "Approved" to 2026-04-12 21:00:52.038595164 +0000 UTC m=+425.303966015 I0412 21:00:52.067382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qrq84-xbgs2" condition "Ready" to 2026-04-12 21:00:52.067367355 +0000 UTC m=+425.332738206 I0412 21:00:52.096447 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:52.096427231 +0000 UTC m=+425.361798102 I0412 21:00:52.120895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qrq84-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:52.121329 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:52.121320042 +0000 UTC m=+425.386690893 I0412 21:00:52.144401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qrq84-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:00:52.144994 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:00:52.144982406 +0000 UTC m=+425.410353257 I0412 21:00:52.147092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qrq84-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qrq84-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:01:23.283562 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 21:01:23.283546866 +0000 UTC m=+456.548917697 I0412 21:01:23.283787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:01:23.283856 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 21:01:23.283841682 +0000 UTC m=+456.549212543 I0412 21:01:23.305759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:01:23.305849 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 21:01:23.305839728 +0000 UTC m=+456.571210579 I0412 21:01:23.459973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:01:23.535768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-knwlb" condition "Approved" to 2026-04-12 21:01:23.535755946 +0000 UTC m=+456.801126787 I0412 21:01:23.557579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-knwlb" condition "Ready" to 2026-04-12 21:01:23.557562778 +0000 UTC m=+456.822933659 I0412 21:01:23.586635 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:01:23.586620314 +0000 UTC m=+456.851991165 I0412 21:01:23.621809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:04:42.000418 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 21:04:42.000401657 +0000 UTC m=+655.265772558 I0412 21:04:42.001036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:04:42.001098 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-12 21:04:42.001092104 +0000 UTC m=+655.266462975 I0412 21:04:42.031378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:04:42.031490 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 21:04:42.03148233 +0000 UTC m=+655.296853181 I0412 21:04:42.347413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:04:42.379787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b6btk" condition "Approved" to 2026-04-12 21:04:42.379748952 +0000 UTC m=+655.645119823 I0412 21:04:42.411611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b6btk" condition "Ready" to 2026-04-12 21:04:42.411599222 +0000 UTC m=+655.676970063 I0412 21:04:42.439941 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:04:42.439930702 +0000 UTC m=+655.705301553 I0412 21:04:42.460562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:04:42.460827 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:04:42.460820425 +0000 UTC m=+655.726191286 I0412 21:04:42.482011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:17.371006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:07:17.371196 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-12 21:07:17.371179014 +0000 UTC m=+810.636549885 I0412 21:07:17.371047 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-12 21:07:17.371018521 +0000 UTC m=+810.636389392 I0412 21:07:17.390552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:17.390646 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-12 21:07:17.390634871 +0000 UTC m=+810.656005742 I0412 21:07:17.722288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:17.757858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rjd6t" condition "Approved" to 2026-04-12 21:07:17.757832874 +0000 UTC m=+811.023203745 I0412 21:07:17.784360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rjd6t" condition "Ready" to 2026-04-12 21:07:17.784346978 +0000 UTC m=+811.049717829 I0412 21:07:17.812768 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:07:17.812749614 +0000 UTC m=+811.078120455 I0412 21:07:17.837308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:17.837770 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:07:17.837760615 +0000 UTC m=+811.103131486 I0412 21:07:17.849261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:17.863385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:08:31.654580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:08:31.654628 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-12 21:08:31.654614122 +0000 UTC m=+884.919985003 I0412 21:08:31.655077 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 21:08:31.655056232 +0000 UTC m=+884.920427103 I0412 21:08:31.678495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:08:31.678605 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 21:08:31.678597149 +0000 UTC m=+884.943968000 I0412 21:08:31.915608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:08:31.955980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-jlw75" condition "Approved" to 2026-04-12 21:08:31.955965037 +0000 UTC m=+885.221335888 I0412 21:08:31.983179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-jlw75" condition "Ready" to 2026-04-12 21:08:31.983165838 +0000 UTC m=+885.248536689 I0412 21:08:32.021752 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:08:32.021736993 +0000 UTC m=+885.287107844 I0412 21:08:32.046037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:08:32.046401 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:08:32.046393465 +0000 UTC m=+885.311764316 I0412 21:08:32.072868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:11:39.126457 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-12 21:11:39.126435426 +0000 UTC m=+1072.391806267 I0412 21:11:39.127000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:11:39.127023 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-12 21:11:39.127018748 +0000 UTC m=+1072.392389589 I0412 21:11:39.147856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:11:39.147943 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-12 21:11:39.147932253 +0000 UTC m=+1072.413303114 I0412 21:11:39.314599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:11:39.348813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4tcgd" condition "Approved" to 2026-04-12 21:11:39.348799474 +0000 UTC m=+1072.614170315 I0412 21:11:39.370179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4tcgd" condition "Ready" to 2026-04-12 21:11:39.370115217 +0000 UTC m=+1072.635486098 I0412 21:11:39.407001 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:11:39.406987774 +0000 UTC m=+1072.672358625 I0412 21:11:39.427496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:11:39.479290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"