I0331 18:30:21.492902 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0331 18:30:21.493118 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0331 18:30:21.493239 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 18:30:21.497339 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0331 18:30:21.497788 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0331 18:30:21.497902 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0331 18:30:21.497966 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0331 18:30:21.500672 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 18:30:21.515771 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0331 18:30:21.516029 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0331 18:30:21.520501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0331 18:30:21.523843 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0331 18:30:21.531394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0331 18:30:21.535045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0331 18:30:21.537090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0331 18:30:21.539143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0331 18:30:21.540916 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0331 18:30:21.540965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0331 18:30:21.542826 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0331 18:30:21.542952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0331 18:30:21.546676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0331 18:30:21.554158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0331 18:30:21.557635 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0331 18:30:21.557708 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0331 18:30:21.560166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0331 18:30:21.562452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0331 18:30:21.564681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0331 18:30:21.566831 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0331 18:30:21.566887 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0331 18:30:21.568960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0331 18:30:21.570857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0331 18:30:21.574029 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0331 18:30:21.574136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0331 18:30:21.579180 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.579350 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.579489 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.580110 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.602393 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.659355 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.679221 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.683288 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.699835 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:21.718214 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 18:30:43.622124 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-31 18:30:43.622104422 +0000 UTC m=+22.162629118 I0331 18:30:44.382063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:30:44.382103 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 18:30:44.382089574 +0000 UTC m=+22.922614180 I0331 18:30:44.382135 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-31 18:30:44.382126155 +0000 UTC m=+22.922650751 E0331 18:30:44.399119 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 18:30:44.399226 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-31 18:30:44.399214797 +0000 UTC m=+22.939739413 E0331 18:30:44.399260 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 18:30:44.401824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:30:44.402038 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 18:30:44.401929148 +0000 UTC m=+22.942453744 E0331 18:30:44.414426 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0331 18:30:44.414655 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 18:30:44.414748 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 18:30:44.414844 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0331 18:30:44.425264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:30:44.450484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jslxl" condition "Approved" to 2026-03-31 18:30:44.450473063 +0000 UTC m=+22.990997659 I0331 18:30:44.466562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jslxl" condition "Ready" to 2026-03-31 18:30:44.466550813 +0000 UTC m=+23.007075409 I0331 18:30:44.495013 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:30:44.495001729 +0000 UTC m=+23.035526325 I0331 18:30:44.532809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:30:49.414903 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:30:49.414888895 +0000 UTC m=+27.955413481 I0331 18:31:16.710188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:31:16.710253 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-31 18:31:16.710237392 +0000 UTC m=+55.250762018 I0331 18:31:16.710415 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-31 18:31:16.710391396 +0000 UTC m=+55.250916042 I0331 18:31:16.726667 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-31 18:31:16.72664829 +0000 UTC m=+55.267172876 I0331 18:31:16.744999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:31:16.745175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:31:16.745229 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-31 18:31:16.745208955 +0000 UTC m=+55.285733541 I0331 18:31:17.955810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:31:17.958439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xpcjc" condition "Approved" to 2026-03-31 18:31:17.958420952 +0000 UTC m=+56.498945618 I0331 18:31:18.140195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xpcjc" condition "Ready" to 2026-03-31 18:31:18.140177244 +0000 UTC m=+56.680701840 I0331 18:31:18.468581 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:31:18.46856046 +0000 UTC m=+57.009085086 I0331 18:31:18.743929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:31:18.744561 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:31:18.744550473 +0000 UTC m=+57.285075079 I0331 18:31:19.471335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:46.722066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:33:46.722125 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-31 18:33:46.722118123 +0000 UTC m=+205.262642729 I0331 18:33:46.722398 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-31 18:33:46.722385089 +0000 UTC m=+205.262909715 E0331 18:33:47.108360 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 18:33:47.108428 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-31 18:33:47.108418264 +0000 UTC m=+205.648942880 I0331 18:33:47.108484 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 18:33:47.111425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:47.111578 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-31 18:33:47.111564145 +0000 UTC m=+205.652088771 E0331 18:33:47.164179 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0331 18:33:47.164335 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 18:33:47.164392 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0331 18:33:47.164450 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0331 18:33:47.176986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:33:47.178465 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-31 18:33:47.178401119 +0000 UTC m=+205.718925725 I0331 18:33:47.177124 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-31 18:33:47.17710953 +0000 UTC m=+205.717634126 I0331 18:33:47.258705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:47.261487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:47.261571 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-31 18:33:47.261558973 +0000 UTC m=+205.802083609 I0331 18:33:47.338139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g88gs" condition "Approved" to 2026-03-31 18:33:47.338126877 +0000 UTC m=+205.878651463 I0331 18:33:47.459481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g88gs" condition "Ready" to 2026-03-31 18:33:47.459464635 +0000 UTC m=+205.999989231 I0331 18:33:48.183452 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:33:48.183433166 +0000 UTC m=+206.723957792 I0331 18:33:48.410763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:48.415317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:48.415768 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:33:48.415759268 +0000 UTC m=+206.956283864 I0331 18:33:49.870854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-r74rx" condition "Approved" to 2026-03-31 18:33:49.870838469 +0000 UTC m=+208.411363095 I0331 18:33:49.871484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:50.030087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-r74rx" condition "Ready" to 2026-03-31 18:33:50.030075087 +0000 UTC m=+208.570599683 I0331 18:33:52.165335 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:33:52.165315195 +0000 UTC m=+210.705839811 I0331 18:33:52.382914 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-r74rx" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:33:52.382900954 +0000 UTC m=+210.923425550 I0331 18:33:53.264618 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:33:53.264606687 +0000 UTC m=+211.805131263 I0331 18:33:53.695904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:53.696365 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:33:53.696356097 +0000 UTC m=+212.236880693 I0331 18:33:54.613023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:33:54.709378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:39:52.404444 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-176.nip.io-tls" condition "Ready" to 2026-03-31 18:39:52.404424522 +0000 UTC m=+570.944949128 I0331 18:39:52.405311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-176.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:39:52.405342 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-176.nip.io-tls" condition "Issuing" to 2026-03-31 18:39:52.405336402 +0000 UTC m=+570.945860998 I0331 18:39:52.459266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-176.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-176.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:39:52.459404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-176.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:39:52.459453 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-176.nip.io-tls" condition "Issuing" to 2026-03-31 18:39:52.459440329 +0000 UTC m=+570.999964945 I0331 18:39:53.547932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-176.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-176.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:39:53.635556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-176.nip.io-tls-k7ltm" condition "Approved" to 2026-03-31 18:39:53.635535414 +0000 UTC m=+572.176060040 I0331 18:39:53.797319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-176.nip.io-tls-k7ltm" condition "Ready" to 2026-03-31 18:39:53.797302381 +0000 UTC m=+572.337827007 I0331 18:39:53.974226 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-176.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:39:53.974214527 +0000 UTC m=+572.514739123 I0331 18:39:54.061171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-176.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-176.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:39:54.061667 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-176.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:39:54.061659303 +0000 UTC m=+572.602183909 I0331 18:39:54.170057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-176.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-176.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:41:11.897661 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-31 18:41:11.897645264 +0000 UTC m=+650.438169850 I0331 18:41:11.897675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:41:11.897970 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-31 18:41:11.897954001 +0000 UTC m=+650.438478647 E0331 18:41:11.942564 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 18:41:11.942616 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-31 18:41:11.942607314 +0000 UTC m=+650.483131900 E0331 18:41:11.942663 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 18:41:11.946103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:41:11.946196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:41:11.946226 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-31 18:41:11.946220995 +0000 UTC m=+650.486745591 E0331 18:41:11.953995 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0331 18:41:11.954104 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 18:41:11.954242 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 18:41:11.954349 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0331 18:41:12.096730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pklcv" condition "Approved" to 2026-03-31 18:41:12.096712768 +0000 UTC m=+650.637237354 I0331 18:41:12.097097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:41:12.152573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pklcv" condition "Ready" to 2026-03-31 18:41:12.152559444 +0000 UTC m=+650.693084060 I0331 18:41:12.212523 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:41:12.212503581 +0000 UTC m=+650.753028197 I0331 18:41:12.241565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:41:12.241899 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:41:12.241886711 +0000 UTC m=+650.782411317 I0331 18:41:12.261521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:41:12.261832 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:41:12.261815619 +0000 UTC m=+650.802340205 I0331 18:41:12.263820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:41:16.955250 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:41:16.955237007 +0000 UTC m=+655.495761603 I0331 18:42:00.433865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:42:00.433916 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 18:42:00.433908131 +0000 UTC m=+698.974432717 I0331 18:42:00.434014 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-31 18:42:00.433986513 +0000 UTC m=+698.974511109 I0331 18:42:00.434202 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-31 18:42:00.434186428 +0000 UTC m=+698.974711024 I0331 18:42:00.434231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:42:00.434269 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-31 18:42:00.43426162 +0000 UTC m=+698.974786196 I0331 18:42:00.434486 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-31 18:42:00.434482055 +0000 UTC m=+698.975006641 I0331 18:42:00.434559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:42:00.434587 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-31 18:42:00.434583257 +0000 UTC m=+698.975107843 I0331 18:42:00.467684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:00.467727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:42:00.467741 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 18:42:00.467736352 +0000 UTC m=+699.008260938 I0331 18:42:00.474925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:00.474973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:42:00.474988 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-31 18:42:00.474984495 +0000 UTC m=+699.015509091 I0331 18:42:00.475846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:00.475974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:42:00.476036 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-31 18:42:00.475997307 +0000 UTC m=+699.016521893 I0331 18:42:00.836385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k6x9b" condition "Approved" to 2026-03-31 18:42:00.836368928 +0000 UTC m=+699.376893534 I0331 18:42:00.853483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:00.857967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vgw9b" condition "Approved" to 2026-03-31 18:42:00.857924233 +0000 UTC m=+699.398448829 I0331 18:42:00.860068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k6x9b" condition "Ready" to 2026-03-31 18:42:00.860050491 +0000 UTC m=+699.400575107 I0331 18:42:00.863013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gr5tm" condition "Approved" to 2026-03-31 18:42:00.863000387 +0000 UTC m=+699.403525013 I0331 18:42:00.898062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vgw9b" condition "Ready" to 2026-03-31 18:42:00.898046704 +0000 UTC m=+699.438571300 I0331 18:42:00.900175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gr5tm" condition "Ready" to 2026-03-31 18:42:00.900160402 +0000 UTC m=+699.440685018 I0331 18:42:00.961811 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:42:00.961790207 +0000 UTC m=+699.502314833 I0331 18:42:00.974812 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:42:00.97479558 +0000 UTC m=+699.515320166 I0331 18:42:01.013759 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:42:01.013746305 +0000 UTC m=+699.554270951 I0331 18:42:01.160526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:01.160870 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:42:01.160864512 +0000 UTC m=+699.701389108 I0331 18:42:01.278524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:01.278952 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:42:01.278944806 +0000 UTC m=+699.819469392 I0331 18:42:01.372057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:01.372422 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:42:01.372416367 +0000 UTC m=+699.912940943 I0331 18:42:01.909171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:01.960307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:02.012607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:02.060430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:19.229415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:42:19.229462 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" condition "Issuing" to 2026-03-31 18:42:19.229453004 +0000 UTC m=+717.769977600 I0331 18:42:19.230275 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" condition "Ready" to 2026-03-31 18:42:19.230258392 +0000 UTC m=+717.770782988 I0331 18:42:19.253859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:19.253957 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" condition "Ready" to 2026-03-31 18:42:19.253947825 +0000 UTC m=+717.794472431 I0331 18:42:20.000838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:22.520851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4c2ln-k7b5s" condition "Approved" to 2026-03-31 18:42:22.520830257 +0000 UTC m=+721.061354883 I0331 18:42:23.165418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4c2ln-k7b5s" condition "Ready" to 2026-03-31 18:42:23.165402255 +0000 UTC m=+721.705926871 I0331 18:42:23.420735 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:42:23.420720544 +0000 UTC m=+721.961245140 I0331 18:42:23.460985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:42:23.829155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4c2ln-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:43:05.784005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:43:05.784124 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-31 18:43:05.784111665 +0000 UTC m=+764.324636291 I0331 18:43:05.784318 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-31 18:43:05.784297669 +0000 UTC m=+764.324822295 I0331 18:43:05.804734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:43:05.804858 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-31 18:43:05.804845481 +0000 UTC m=+764.345370107 I0331 18:43:06.029310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:43:06.062769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bxvr6" condition "Approved" to 2026-03-31 18:43:06.062750349 +0000 UTC m=+764.603274945 I0331 18:43:06.084098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bxvr6" condition "Ready" to 2026-03-31 18:43:06.084082837 +0000 UTC m=+764.624607443 I0331 18:43:06.114514 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:43:06.114498591 +0000 UTC m=+764.655023197 I0331 18:43:06.140079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:43:06.140375 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:43:06.140368274 +0000 UTC m=+764.680892850 I0331 18:43:06.146601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:43:06.162535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:46:42.464548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:46:42.464620 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-31 18:46:42.464612193 +0000 UTC m=+981.005136799 I0331 18:46:42.464753 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-31 18:46:42.464744465 +0000 UTC m=+981.005269061 I0331 18:46:42.495413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:46:42.495505 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-31 18:46:42.495495913 +0000 UTC m=+981.036020539 I0331 18:46:42.931286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:46:42.973074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r5ct8" condition "Approved" to 2026-03-31 18:46:42.973061118 +0000 UTC m=+981.513585704 I0331 18:46:42.996307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r5ct8" condition "Ready" to 2026-03-31 18:46:42.996294477 +0000 UTC m=+981.536819093 I0331 18:46:43.030487 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:46:43.030474252 +0000 UTC m=+981.570998848 I0331 18:46:43.053470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:46:43.053797 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:46:43.053787874 +0000 UTC m=+981.594312470 I0331 18:46:43.060352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:46:43.087195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:49:13.553487 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-31 18:49:13.553468578 +0000 UTC m=+1132.093993194 I0331 18:49:13.553500 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:49:13.553559 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-31 18:49:13.55355161 +0000 UTC m=+1132.094076236 I0331 18:49:13.571430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:49:13.571557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:49:13.571582 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-31 18:49:13.571575014 +0000 UTC m=+1132.112099610 I0331 18:49:14.033444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qwh8t" condition "Approved" to 2026-03-31 18:49:14.033431036 +0000 UTC m=+1132.573955642 I0331 18:49:14.053633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qwh8t" condition "Ready" to 2026-03-31 18:49:14.053622538 +0000 UTC m=+1132.594147124 I0331 18:49:14.083212 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:49:14.08320435 +0000 UTC m=+1132.623728936 I0331 18:49:14.107770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:49:14.108381 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:49:14.108372153 +0000 UTC m=+1132.648896749 I0331 18:49:14.122116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:49:14.134196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:51:14.698561 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-31 18:51:14.698541717 +0000 UTC m=+1253.239066343 I0331 18:51:14.699379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:51:14.699458 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-31 18:51:14.699425187 +0000 UTC m=+1253.239949803 I0331 18:51:14.926927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:51:14.927020 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-31 18:51:14.927011095 +0000 UTC m=+1253.467535701 I0331 18:51:15.361517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:51:15.870249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gggmf" condition "Approved" to 2026-03-31 18:51:15.870240871 +0000 UTC m=+1254.410765457 I0331 18:51:15.936574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gggmf" condition "Ready" to 2026-03-31 18:51:15.936561827 +0000 UTC m=+1254.477086423 I0331 18:51:16.026460 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:51:16.02644714 +0000 UTC m=+1254.566971736 I0331 18:51:16.079217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:51:16.079587 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:51:16.07958088 +0000 UTC m=+1254.620105476 I0331 18:51:16.105409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:51:16.107382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:51:16.107845 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:51:16.107834603 +0000 UTC m=+1254.648359199 I0331 18:54:47.074271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 18:54:47.074381 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-31 18:54:47.074369434 +0000 UTC m=+1465.614894060 I0331 18:54:47.075036 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-31 18:54:47.075028109 +0000 UTC m=+1465.615552745 I0331 18:54:47.128806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:54:47.128859 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-31 18:54:47.128853564 +0000 UTC m=+1465.669378150 I0331 18:54:47.212370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:54:47.300316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mxdvr" condition "Approved" to 2026-03-31 18:54:47.300302145 +0000 UTC m=+1465.840826761 I0331 18:54:47.332403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mxdvr" condition "Ready" to 2026-03-31 18:54:47.332392744 +0000 UTC m=+1465.872917330 I0331 18:54:47.390053 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:54:47.390036454 +0000 UTC m=+1465.930561060 I0331 18:54:47.471164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 18:54:47.471828 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 18:54:47.471820866 +0000 UTC m=+1466.012345462 I0331 18:54:47.588489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"