I0406 17:07:52.983615 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0406 17:07:52.983715 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0406 17:07:52.983767 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0406 17:07:52.992735 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0406 17:07:52.993283 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0406 17:07:52.993403 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0406 17:07:52.993444 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0406 17:07:52.996405 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0406 17:07:53.022562 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0406 17:07:53.022882 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0406 17:07:53.028750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0406 17:07:53.034230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0406 17:07:53.039118 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0406 17:07:53.042606 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0406 17:07:53.045588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0406 17:07:53.048680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0406 17:07:53.051327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0406 17:07:53.053791 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0406 17:07:53.053866 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0406 17:07:53.060110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0406 17:07:53.064730 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0406 17:07:53.067791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0406 17:07:53.070383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0406 17:07:53.072503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0406 17:07:53.074446 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0406 17:07:53.074476 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0406 17:07:53.074667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0406 17:07:53.076664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0406 17:07:53.078861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0406 17:07:53.082571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0406 17:07:53.088099 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0406 17:07:53.088130 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0406 17:07:53.088247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0406 17:07:53.091650 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.091656 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.091996 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.092063 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.091899 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.092361 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.092490 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.092972 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.100186 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:07:53.186079 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0406 17:08:06.630869 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-06 17:08:06.630846491 +0000 UTC m=+13.679742462 I0406 17:08:07.377213 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-06 17:08:07.37719152 +0000 UTC m=+14.426087511 I0406 17:08:07.378413 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:08:07.378448 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-06 17:08:07.378441685 +0000 UTC m=+14.427337676 E0406 17:08:07.394083 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 17:08:07.394182 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-06 17:08:07.394173593 +0000 UTC m=+14.443069564 E0406 17:08:07.394210 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 17:08:07.396019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:07.396117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:08:07.396189 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-06 17:08:07.396175979 +0000 UTC m=+14.445071980 E0406 17:08:07.407757 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0406 17:08:07.408185 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 17:08:07.408238 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 17:08:07.408276 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0406 17:08:07.435506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jxt4c" condition "Approved" to 2026-04-06 17:08:07.435491374 +0000 UTC m=+14.484387335 I0406 17:08:07.448615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jxt4c" condition "Ready" to 2026-04-06 17:08:07.448599269 +0000 UTC m=+14.497495270 I0406 17:08:07.473662 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:08:07.473653857 +0000 UTC m=+14.522549828 I0406 17:08:07.492785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:07.493430 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:08:07.493420888 +0000 UTC m=+14.542316889 I0406 17:08:07.507803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:12.408522 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:08:12.408507164 +0000 UTC m=+19.457403135 I0406 17:08:33.829529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:08:33.829635 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-06 17:08:33.82962433 +0000 UTC m=+40.878520321 I0406 17:08:33.829625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-06 17:08:33.82888532 +0000 UTC m=+40.877781331 I0406 17:08:33.851126 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-06 17:08:33.851113035 +0000 UTC m=+40.900008996 I0406 17:08:33.863089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:33.863228 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-06 17:08:33.863216865 +0000 UTC m=+40.912112846 I0406 17:08:34.154023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:34.203649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cxpt5" condition "Approved" to 2026-04-06 17:08:34.203635035 +0000 UTC m=+41.252531026 I0406 17:08:34.233631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cxpt5" condition "Ready" to 2026-04-06 17:08:34.233610302 +0000 UTC m=+41.282506273 I0406 17:08:34.270420 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:08:34.270404333 +0000 UTC m=+41.319300304 I0406 17:08:34.291906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:08:34.353538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:10:16.691821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:10:16.691952 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-06 17:10:16.691889244 +0000 UTC m=+143.740785235 I0406 17:10:16.691925 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-06 17:10:16.691881844 +0000 UTC m=+143.740777865 E0406 17:10:16.705063 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0406 17:10:16.706042 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-06 17:10:16.705132164 +0000 UTC m=+143.754028145 I0406 17:10:16.706100 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0406 17:10:16.708456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:10:16.708530 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-06 17:10:16.708524387 +0000 UTC m=+143.757420358 E0406 17:10:16.717675 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0406 17:10:16.717761 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0406 17:10:16.717782 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0406 17:10:16.717815 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0406 17:10:16.720663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:10:16.720689 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-06 17:10:16.720683568 +0000 UTC m=+143.769579529 I0406 17:10:16.720690 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-06 17:10:16.720674137 +0000 UTC m=+143.769570108 I0406 17:10:16.738087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:10:16.738178 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-06 17:10:16.738168773 +0000 UTC m=+143.787064774 I0406 17:10:16.826956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:10:16.858254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gpnvr" condition "Approved" to 2026-04-06 17:10:16.85823772 +0000 UTC m=+143.907133721 I0406 17:10:16.884388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gpnvr" condition "Ready" to 2026-04-06 17:10:16.884373941 +0000 UTC m=+143.933269912 I0406 17:10:16.914413 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:10:16.914401908 +0000 UTC m=+143.963297869 I0406 17:10:16.940177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:10:16.943915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:10:16.969641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-d9cc6" condition "Approved" to 2026-04-06 17:10:16.96962428 +0000 UTC m=+144.018520271 I0406 17:10:16.987804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-d9cc6" condition "Ready" to 2026-04-06 17:10:16.987790224 +0000 UTC m=+144.036686195 I0406 17:10:21.718382 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:10:21.718368444 +0000 UTC m=+148.767264445 I0406 17:10:21.735144 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-d9cc6" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:10:21.73512757 +0000 UTC m=+148.784023571 I0406 17:10:21.765557 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:10:21.765542058 +0000 UTC m=+148.814438049 I0406 17:10:21.783154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:10:21.783469 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:10:21.783461685 +0000 UTC m=+148.832357656 I0406 17:10:21.793989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:10:21.800755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:12:54.307758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:12:54.307809 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Issuing" to 2026-04-06 17:12:54.307785204 +0000 UTC m=+301.356681165 I0406 17:12:54.307853 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-04-06 17:12:54.307831855 +0000 UTC m=+301.356727856 I0406 17:12:54.325804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:12:54.325901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready" to 2026-04-06 17:12:54.3258909 +0000 UTC m=+301.374786871 I0406 17:12:54.468362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:12:54.494314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-22qkw" condition "Approved" to 2026-04-06 17:12:54.49430046 +0000 UTC m=+301.543196421 I0406 17:12:54.511615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-233.nip.io-tls-22qkw" condition "Ready" to 2026-04-06 17:12:54.511598425 +0000 UTC m=+301.560494426 I0406 17:12:54.537141 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:12:54.537128075 +0000 UTC m=+301.586024046 I0406 17:12:54.556278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:12:54.603172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:05.476619 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-06 17:14:05.476603788 +0000 UTC m=+372.525499779 I0406 17:14:05.477238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:05.477269 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-06 17:14:05.477261906 +0000 UTC m=+372.526157897 E0406 17:14:05.490230 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 17:14:05.490291 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-06 17:14:05.490280823 +0000 UTC m=+372.539176794 E0406 17:14:05.490479 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0406 17:14:05.493007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:05.493144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:05.493173 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-06 17:14:05.493166612 +0000 UTC m=+372.542062583 E0406 17:14:05.501708 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0406 17:14:05.501847 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 17:14:05.501887 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0406 17:14:05.501954 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0406 17:14:05.535843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:05.540695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-89qgh" condition "Approved" to 2026-04-06 17:14:05.54062583 +0000 UTC m=+372.589521821 I0406 17:14:05.553621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-89qgh" condition "Ready" to 2026-04-06 17:14:05.553604075 +0000 UTC m=+372.602500076 I0406 17:14:05.574820 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:05.574805396 +0000 UTC m=+372.623701367 I0406 17:14:05.590649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:05.590912 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:05.590901286 +0000 UTC m=+372.639797247 I0406 17:14:05.605494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:05.606597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:10.502276 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:10.502260918 +0000 UTC m=+377.551156889 I0406 17:14:49.821526 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-06 17:14:49.821494261 +0000 UTC m=+416.870390222 I0406 17:14:49.822279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:49.822309 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-06 17:14:49.822302223 +0000 UTC m=+416.871198194 I0406 17:14:49.826894 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-06 17:14:49.826872148 +0000 UTC m=+416.875768119 I0406 17:14:49.827215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:49.827252 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-06 17:14:49.827245558 +0000 UTC m=+416.876141509 I0406 17:14:49.836406 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-06 17:14:49.836389818 +0000 UTC m=+416.885285779 I0406 17:14:49.838039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:49.838074 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-06 17:14:49.838067684 +0000 UTC m=+416.886963645 I0406 17:14:49.848858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:49.848944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:49.848975 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-06 17:14:49.848967071 +0000 UTC m=+416.897863032 I0406 17:14:49.851127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:49.851379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:49.851771 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-06 17:14:49.851758808 +0000 UTC m=+416.900654829 I0406 17:14:49.865537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:49.865597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:49.865617 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-06 17:14:49.865611586 +0000 UTC m=+416.914507547 I0406 17:14:50.011203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:50.020684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tb8wk" condition "Approved" to 2026-04-06 17:14:50.020670043 +0000 UTC m=+417.069566014 I0406 17:14:50.044982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tb8wk" condition "Ready" to 2026-04-06 17:14:50.044970327 +0000 UTC m=+417.093866298 I0406 17:14:50.078423 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:50.07840258 +0000 UTC m=+417.127298551 I0406 17:14:50.096542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:50.102526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:50.104777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mtwrw" condition "Approved" to 2026-04-06 17:14:50.10476725 +0000 UTC m=+417.153663211 I0406 17:14:50.132727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mtwrw" condition "Ready" to 2026-04-06 17:14:50.132715604 +0000 UTC m=+417.181611575 I0406 17:14:50.179556 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:50.179532583 +0000 UTC m=+417.228428554 I0406 17:14:50.263546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:50.263942 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:50.263935519 +0000 UTC m=+417.312831500 I0406 17:14:50.619459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:50.664023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:50.724346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wwmf7" condition "Approved" to 2026-04-06 17:14:50.724330438 +0000 UTC m=+417.773226409 I0406 17:14:50.973277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wwmf7" condition "Ready" to 2026-04-06 17:14:50.973263699 +0000 UTC m=+418.022159670 I0406 17:14:51.318122 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:51.31810045 +0000 UTC m=+418.366996451 I0406 17:14:51.413932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:51.414475 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:51.414467743 +0000 UTC m=+418.463363714 I0406 17:14:51.617329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:57.645063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:57.645106 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" condition "Issuing" to 2026-04-06 17:14:57.64509625 +0000 UTC m=+424.693992261 I0406 17:14:57.645811 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" condition "Ready" to 2026-04-06 17:14:57.645802439 +0000 UTC m=+424.694698460 I0406 17:14:57.659191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kr85m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:57.659245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:14:57.659285 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" condition "Issuing" to 2026-04-06 17:14:57.659254577 +0000 UTC m=+424.708150548 I0406 17:14:57.937559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kr85m-7ljnh" condition "Approved" to 2026-04-06 17:14:57.93754203 +0000 UTC m=+424.986437991 I0406 17:14:57.953801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kr85m-7ljnh" condition "Ready" to 2026-04-06 17:14:57.953791484 +0000 UTC m=+425.002687455 I0406 17:14:57.986861 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:57.986850897 +0000 UTC m=+425.035746858 I0406 17:14:58.004808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kr85m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:14:58.005343 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:14:58.005332742 +0000 UTC m=+425.054228713 I0406 17:14:58.023425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kr85m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kr85m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:15:20.713386 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-06 17:15:20.71337062 +0000 UTC m=+447.762266601 I0406 17:15:20.713686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:15:20.713751 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-06 17:15:20.71373344 +0000 UTC m=+447.762629441 I0406 17:15:20.733756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:15:20.733818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:15:20.733831 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-06 17:15:20.733826739 +0000 UTC m=+447.782722700 I0406 17:15:21.034553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:15:21.045538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7gvdt" condition "Approved" to 2026-04-06 17:15:21.045522344 +0000 UTC m=+448.094418305 I0406 17:15:21.062593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7gvdt" condition "Ready" to 2026-04-06 17:15:21.062578101 +0000 UTC m=+448.111474072 I0406 17:15:21.094056 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:15:21.09404101 +0000 UTC m=+448.142937001 I0406 17:15:21.121235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:15:21.121683 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:15:21.121673795 +0000 UTC m=+448.170569766 I0406 17:15:21.132289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:15:21.139698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:15:21.140155 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:15:21.14014475 +0000 UTC m=+448.189040721 I0406 17:18:39.033619 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-06 17:18:39.033576175 +0000 UTC m=+646.082472146 I0406 17:18:39.033644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:18:39.033901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-06 17:18:39.033874753 +0000 UTC m=+646.082770724 I0406 17:18:39.051698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:18:39.051834 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-06 17:18:39.051814903 +0000 UTC m=+646.100710974 I0406 17:18:39.165356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:18:39.200599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dqh6c" condition "Approved" to 2026-04-06 17:18:39.20058479 +0000 UTC m=+646.249480791 I0406 17:18:39.220550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dqh6c" condition "Ready" to 2026-04-06 17:18:39.220539666 +0000 UTC m=+646.269435637 I0406 17:18:39.249427 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:18:39.249408466 +0000 UTC m=+646.298304467 I0406 17:18:39.271535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:18:39.271877 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:18:39.27187096 +0000 UTC m=+646.320766921 I0406 17:18:39.288552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:18:39.293969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:18:39.294257 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:18:39.294249971 +0000 UTC m=+646.343145932 I0406 17:21:05.381884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:21:05.381975 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-06 17:21:05.381948425 +0000 UTC m=+792.430844386 I0406 17:21:05.382202 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-06 17:21:05.382181792 +0000 UTC m=+792.431077783 I0406 17:21:05.401532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:21:05.401623 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-06 17:21:05.401613182 +0000 UTC m=+792.450509183 I0406 17:21:05.522646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:21:05.563218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-www92" condition "Approved" to 2026-04-06 17:21:05.563203603 +0000 UTC m=+792.612099564 I0406 17:21:05.592521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-www92" condition "Ready" to 2026-04-06 17:21:05.592509733 +0000 UTC m=+792.641405704 I0406 17:21:05.668016 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:21:05.667999304 +0000 UTC m=+792.716895295 I0406 17:21:05.710987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:21:05.711506 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:21:05.711496822 +0000 UTC m=+792.760392813 I0406 17:21:05.734756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:22:07.238696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:22:07.238764 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-06 17:22:07.238752493 +0000 UTC m=+854.287648454 I0406 17:22:07.238764 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-06 17:22:07.238728262 +0000 UTC m=+854.287624253 I0406 17:22:07.261088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:22:07.261179 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-06 17:22:07.261171125 +0000 UTC m=+854.310067096 I0406 17:22:07.370137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:22:07.404007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-wtx86" condition "Approved" to 2026-04-06 17:22:07.403987593 +0000 UTC m=+854.452883594 I0406 17:22:07.423523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-wtx86" condition "Ready" to 2026-04-06 17:22:07.423510076 +0000 UTC m=+854.472406077 I0406 17:22:07.453048 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:22:07.453037612 +0000 UTC m=+854.501933583 I0406 17:22:07.475542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:22:07.475813 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:22:07.475806594 +0000 UTC m=+854.524702555 I0406 17:22:07.486801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:22:07.511602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:25:11.753406 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-06 17:25:11.753366777 +0000 UTC m=+1038.802262768 I0406 17:25:11.753389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0406 17:25:11.753584 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-06 17:25:11.753573302 +0000 UTC m=+1038.802469303 I0406 17:25:11.773163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:25:11.773300 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-06 17:25:11.773293581 +0000 UTC m=+1038.822189552 I0406 17:25:11.958187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0406 17:25:11.988899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-q2lrq" condition "Approved" to 2026-04-06 17:25:11.988888056 +0000 UTC m=+1039.037784027 I0406 17:25:12.015605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-q2lrq" condition "Ready" to 2026-04-06 17:25:12.015588625 +0000 UTC m=+1039.064484626 I0406 17:25:12.042225 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-06 17:25:12.042213071 +0000 UTC m=+1039.091109042 I0406 17:25:12.059916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"