I0415 07:33:03.799017 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0415 07:33:03.799194 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0415 07:33:03.799315 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0415 07:33:03.806674 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0415 07:33:03.807273 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0415 07:33:03.807415 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0415 07:33:03.807334 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0415 07:33:03.810128 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0415 07:33:03.825087 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0415 07:33:03.830085 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0415 07:33:03.834299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0415 07:33:03.840242 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0415 07:33:03.844387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0415 07:33:03.846899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0415 07:33:03.849656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0415 07:33:03.852106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0415 07:33:03.853952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0415 07:33:03.855759 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0415 07:33:03.855800 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0415 07:33:03.855808 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0415 07:33:03.855818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0415 07:33:03.860900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0415 07:33:03.865120 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0415 07:33:03.868216 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0415 07:33:03.870101 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0415 07:33:03.870142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0415 07:33:03.872130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0415 07:33:03.874023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0415 07:33:03.875911 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0415 07:33:03.877488 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0415 07:33:03.877506 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0415 07:33:03.877653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0415 07:33:03.879664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0415 07:33:03.882017 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.884326 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.884582 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.906223 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.919629 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.937180 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.953884 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.973448 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.975329 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:03.989727 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0415 07:33:17.413991 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-15 07:33:17.413975924 +0000 UTC m=+13.641520008 I0415 07:33:18.081816 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-15 07:33:18.081799744 +0000 UTC m=+14.309343828 I0415 07:33:18.081920 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:33:18.081988 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-15 07:33:18.08198138 +0000 UTC m=+14.309525474 E0415 07:33:18.096179 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0415 07:33:18.096258 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-15 07:33:18.096247193 +0000 UTC m=+14.323791277 E0415 07:33:18.096297 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0415 07:33:18.096344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:33:18.096391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:33:18.096409 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-15 07:33:18.096405208 +0000 UTC m=+14.323949272 E0415 07:33:18.108444 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0415 07:33:18.108577 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0415 07:33:18.108622 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0415 07:33:18.108661 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0415 07:33:18.142318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8phbp" condition "Approved" to 2026-04-15 07:33:18.142301829 +0000 UTC m=+14.369845923 I0415 07:33:18.143735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:33:18.155145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8phbp" condition "Ready" to 2026-04-15 07:33:18.155133866 +0000 UTC m=+14.382677930 I0415 07:33:18.177568 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:33:18.177558365 +0000 UTC m=+14.405102429 I0415 07:33:18.194647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:33:23.109840 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:33:23.109830687 +0000 UTC m=+19.337374751 I0415 07:33:44.883551 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-15 07:33:44.883535734 +0000 UTC m=+41.111079798 I0415 07:33:44.883580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:33:44.883637 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-15 07:33:44.883630677 +0000 UTC m=+41.111174751 I0415 07:33:44.900743 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-15 07:33:44.90072816 +0000 UTC m=+41.128272244 I0415 07:33:44.907384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:33:44.907445 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-15 07:33:44.907439847 +0000 UTC m=+41.134983911 I0415 07:33:45.086523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:33:45.120229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-llrv6" condition "Approved" to 2026-04-15 07:33:45.120218748 +0000 UTC m=+41.347762812 I0415 07:33:45.159061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-llrv6" condition "Ready" to 2026-04-15 07:33:45.159050574 +0000 UTC m=+41.386594638 I0415 07:33:45.185892 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:33:45.185878552 +0000 UTC m=+41.413422616 I0415 07:33:45.207741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:33:45.208229 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:33:45.208219394 +0000 UTC m=+41.435763478 I0415 07:33:45.227516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:35:30.939024 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-15 07:35:30.939009591 +0000 UTC m=+147.166553645 I0415 07:35:30.938941 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:35:30.939174 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-15 07:35:30.939162436 +0000 UTC m=+147.166706530 E0415 07:35:30.954128 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0415 07:35:30.954219 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-15 07:35:30.954208227 +0000 UTC m=+147.181752321 I0415 07:35:30.954251 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0415 07:35:30.955752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:35:30.955845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:35:30.955884 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-15 07:35:30.95587524 +0000 UTC m=+147.183419324 E0415 07:35:30.963529 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0415 07:35:30.964119 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0415 07:35:30.964246 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0415 07:35:30.964384 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0415 07:35:30.971367 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-15 07:35:30.971353775 +0000 UTC m=+147.198897839 I0415 07:35:30.972015 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:35:30.972036 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-15 07:35:30.972031877 +0000 UTC m=+147.199575941 I0415 07:35:30.987528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:35:30.987668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:35:30.987705 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-15 07:35:30.987695267 +0000 UTC m=+147.215239341 I0415 07:35:31.136402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ls7p4" condition "Approved" to 2026-04-15 07:35:31.136387802 +0000 UTC m=+147.363931886 I0415 07:35:31.163627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ls7p4" condition "Ready" to 2026-04-15 07:35:31.163614613 +0000 UTC m=+147.391158677 I0415 07:35:31.317778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:35:31.324526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-tjmj8" condition "Approved" to 2026-04-15 07:35:31.324503357 +0000 UTC m=+147.552047441 I0415 07:35:31.367738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-tjmj8" condition "Ready" to 2026-04-15 07:35:31.367723379 +0000 UTC m=+147.595267433 I0415 07:35:31.396420 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:35:31.396400126 +0000 UTC m=+147.623944200 I0415 07:35:31.419239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:35:35.964540 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:35:35.964527698 +0000 UTC m=+152.192071792 I0415 07:35:35.983746 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-ls7p4" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:35:35.983728202 +0000 UTC m=+152.211272266 I0415 07:35:36.026288 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:35:36.02627064 +0000 UTC m=+152.253814734 I0415 07:35:36.047630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:35:36.047947 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:35:36.047938483 +0000 UTC m=+152.275482547 I0415 07:35:36.063999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:35:36.065422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:35:36.065764 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:35:36.065756241 +0000 UTC m=+152.293300305 I0415 07:38:13.280794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-163.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:38:13.280756 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready" to 2026-04-15 07:38:13.280723332 +0000 UTC m=+309.508267396 I0415 07:38:13.280844 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Issuing" to 2026-04-15 07:38:13.280831815 +0000 UTC m=+309.508375899 I0415 07:38:13.300125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:38:13.300240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-163.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:38:13.300268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Issuing" to 2026-04-15 07:38:13.300255274 +0000 UTC m=+309.527799358 I0415 07:38:13.559406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-163.nip.io-tls-5dpdq" condition "Approved" to 2026-04-15 07:38:13.559390089 +0000 UTC m=+309.786934173 I0415 07:38:13.592794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-163.nip.io-tls-5dpdq" condition "Ready" to 2026-04-15 07:38:13.592771933 +0000 UTC m=+309.820316027 I0415 07:38:13.624410 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:38:13.62438938 +0000 UTC m=+309.851933464 I0415 07:38:13.645238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:38:13.645756 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-163.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:38:13.64574552 +0000 UTC m=+309.873289584 I0415 07:38:13.650326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:38:13.664313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-163.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-163.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:39:23.081421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:39:23.081440 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-15 07:39:23.081423879 +0000 UTC m=+379.308967963 I0415 07:39:23.081473 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-15 07:39:23.08146462 +0000 UTC m=+379.309008704 E0415 07:39:23.093363 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0415 07:39:23.093418 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-15 07:39:23.093409731 +0000 UTC m=+379.320953795 E0415 07:39:23.093905 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0415 07:39:23.095415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:39:23.095491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:39:23.095560 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-15 07:39:23.095554699 +0000 UTC m=+379.323098763 E0415 07:39:23.102902 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0415 07:39:23.103012 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0415 07:39:23.103053 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0415 07:39:23.103107 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0415 07:39:23.133474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-r9hnn" condition "Approved" to 2026-04-15 07:39:23.133463436 +0000 UTC m=+379.361007500 I0415 07:39:23.135317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:39:23.143513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-r9hnn" condition "Ready" to 2026-04-15 07:39:23.143504686 +0000 UTC m=+379.371048740 I0415 07:39:23.165003 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:39:23.164987721 +0000 UTC m=+379.392531815 I0415 07:39:23.182515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:39:23.182922 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:39:23.182911102 +0000 UTC m=+379.410455176 I0415 07:39:23.194638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:39:23.196307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:39:28.104122 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:39:28.10410845 +0000 UTC m=+384.331652534 I0415 07:40:04.667075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:04.667103 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-15 07:40:04.667089886 +0000 UTC m=+420.894633940 I0415 07:40:04.667117 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-15 07:40:04.667109737 +0000 UTC m=+420.894653791 I0415 07:40:04.667672 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-15 07:40:04.667662404 +0000 UTC m=+420.895206458 I0415 07:40:04.667952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:04.667970 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-15 07:40:04.667967134 +0000 UTC m=+420.895511188 I0415 07:40:04.688866 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-15 07:40:04.68885221 +0000 UTC m=+420.916396264 I0415 07:40:04.689259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:04.689292 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-15 07:40:04.689289124 +0000 UTC m=+420.916833178 I0415 07:40:04.752350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:04.752430 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-15 07:40:04.752422847 +0000 UTC m=+420.979966911 I0415 07:40:04.752809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:04.752849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:04.752863 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-15 07:40:04.75285798 +0000 UTC m=+420.980402044 I0415 07:40:04.754776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:04.754814 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:04.754828 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-15 07:40:04.754824173 +0000 UTC m=+420.982368237 I0415 07:40:04.864896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:04.898018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zxw2p" condition "Approved" to 2026-04-15 07:40:04.898007908 +0000 UTC m=+421.125551962 I0415 07:40:04.921327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zxw2p" condition "Ready" to 2026-04-15 07:40:04.921317362 +0000 UTC m=+421.148861426 I0415 07:40:04.984293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:04.984329 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-15 07:40:04.984322681 +0000 UTC m=+421.211866735 I0415 07:40:04.994005 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:04.994001479 +0000 UTC m=+421.221545533 I0415 07:40:05.007472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:05.010210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-55h8b" condition "Approved" to 2026-04-15 07:40:05.010201756 +0000 UTC m=+421.237745820 I0415 07:40:05.014429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:05.014627 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:05.014624147 +0000 UTC m=+421.242168201 I0415 07:40:05.027266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-55h8b" condition "Ready" to 2026-04-15 07:40:05.02725422 +0000 UTC m=+421.254798274 I0415 07:40:05.030572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lcr6b" condition "Approved" to 2026-04-15 07:40:05.030566455 +0000 UTC m=+421.258110499 I0415 07:40:05.274870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lcr6b" condition "Ready" to 2026-04-15 07:40:05.274856274 +0000 UTC m=+421.502400338 I0415 07:40:05.502079 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:05.502069919 +0000 UTC m=+421.729613983 I0415 07:40:05.852678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:05.853136 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:05.853127782 +0000 UTC m=+422.080671866 I0415 07:40:06.352669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:06.421565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-758km" condition "Approved" to 2026-04-15 07:40:06.421544265 +0000 UTC m=+422.649088349 I0415 07:40:06.454125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:06.506005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:06.971637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-758km" condition "Ready" to 2026-04-15 07:40:06.971625514 +0000 UTC m=+423.199169578 I0415 07:40:07.153722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:07.203274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:07.455694 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:07.455677978 +0000 UTC m=+423.683222062 I0415 07:40:07.552596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:07.553046 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:07.553033112 +0000 UTC m=+423.780577196 I0415 07:40:07.752548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:12.519124 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" condition "Ready" to 2026-04-15 07:40:12.519104233 +0000 UTC m=+428.746648317 I0415 07:40:12.519340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:12.519407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" condition "Issuing" to 2026-04-15 07:40:12.519391302 +0000 UTC m=+428.746935426 I0415 07:40:12.593559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:12.593648 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" condition "Ready" to 2026-04-15 07:40:12.593638959 +0000 UTC m=+428.821183023 I0415 07:40:12.843881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:12.872407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jbbg5-wlt69" condition "Approved" to 2026-04-15 07:40:12.872393947 +0000 UTC m=+429.099938011 I0415 07:40:12.894947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jbbg5-wlt69" condition "Ready" to 2026-04-15 07:40:12.894936816 +0000 UTC m=+429.122480880 I0415 07:40:12.932236 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:12.932131702 +0000 UTC m=+429.159675766 I0415 07:40:12.948413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:12.948599 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:12.948594157 +0000 UTC m=+429.176138211 I0415 07:40:12.969211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jbbg5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:33.525241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:33.525279 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-15 07:40:33.525269072 +0000 UTC m=+449.752813156 I0415 07:40:33.525974 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-15 07:40:33.525966514 +0000 UTC m=+449.753510598 I0415 07:40:33.545360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:33.545490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:40:33.545525 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-15 07:40:33.545515577 +0000 UTC m=+449.773059641 I0415 07:40:33.700557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:40:33.707184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pv2dm" condition "Approved" to 2026-04-15 07:40:33.707165521 +0000 UTC m=+449.934709585 I0415 07:40:33.726524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pv2dm" condition "Ready" to 2026-04-15 07:40:33.726510388 +0000 UTC m=+449.954054442 I0415 07:40:33.756094 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:40:33.756078721 +0000 UTC m=+449.983622785 I0415 07:40:33.776056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:43:58.818002 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-15 07:43:58.817981799 +0000 UTC m=+655.045525863 I0415 07:43:58.818617 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:43:58.818679 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-15 07:43:58.81866562 +0000 UTC m=+655.046209704 I0415 07:43:58.836941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:43:58.837079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:43:58.837129 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-15 07:43:58.837120036 +0000 UTC m=+655.064664100 I0415 07:43:59.371429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:43:59.378068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vjc4l" condition "Approved" to 2026-04-15 07:43:59.378051004 +0000 UTC m=+655.605595068 I0415 07:43:59.398658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vjc4l" condition "Ready" to 2026-04-15 07:43:59.398640737 +0000 UTC m=+655.626184821 I0415 07:43:59.426887 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:43:59.426872482 +0000 UTC m=+655.654416546 I0415 07:43:59.448883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:46:31.163332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:46:31.163363 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-15 07:46:31.163356747 +0000 UTC m=+807.390900811 I0415 07:46:31.163437 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-15 07:46:31.163415358 +0000 UTC m=+807.390959442 I0415 07:46:31.185609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:46:31.185778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:46:31.185855 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-15 07:46:31.185845739 +0000 UTC m=+807.413389833 I0415 07:46:31.376915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:46:31.385305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8k6l9" condition "Approved" to 2026-04-15 07:46:31.385290098 +0000 UTC m=+807.612834162 I0415 07:46:31.405980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8k6l9" condition "Ready" to 2026-04-15 07:46:31.405969323 +0000 UTC m=+807.633513387 I0415 07:46:31.431755 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:46:31.43174646 +0000 UTC m=+807.659290524 I0415 07:46:31.454164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:46:31.454607 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:46:31.454501761 +0000 UTC m=+807.682045815 I0415 07:46:31.460730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:46:31.478113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:47:41.190240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:47:41.190324 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-15 07:47:41.190315619 +0000 UTC m=+877.417859673 I0415 07:47:41.190657 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-15 07:47:41.190155564 +0000 UTC m=+877.417699618 I0415 07:47:41.204783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:47:41.204937 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-15 07:47:41.204927172 +0000 UTC m=+877.432471236 I0415 07:47:41.408836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:47:41.444659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vrhg2" condition "Approved" to 2026-04-15 07:47:41.444645917 +0000 UTC m=+877.672190011 I0415 07:47:41.462092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vrhg2" condition "Ready" to 2026-04-15 07:47:41.46208413 +0000 UTC m=+877.689628184 I0415 07:47:41.493905 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:47:41.493893307 +0000 UTC m=+877.721437361 I0415 07:47:41.521909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:47:41.588169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:50:46.681555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0415 07:50:46.681649 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-15 07:50:46.681636079 +0000 UTC m=+1062.909180163 I0415 07:50:46.681563 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-15 07:50:46.681544426 +0000 UTC m=+1062.909088490 I0415 07:50:46.701616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:50:46.701734 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-15 07:50:46.701723743 +0000 UTC m=+1062.929267807 I0415 07:50:46.854825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0415 07:50:46.892394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zg7pv" condition "Approved" to 2026-04-15 07:50:46.892379549 +0000 UTC m=+1063.119923643 I0415 07:50:46.913551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zg7pv" condition "Ready" to 2026-04-15 07:50:46.913539227 +0000 UTC m=+1063.141083301 I0415 07:50:46.943862 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-15 07:50:46.943851204 +0000 UTC m=+1063.171395268 I0415 07:50:46.963704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" E0415 07:56:52.710913 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out