I0420 02:07:56.497613 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 02:07:56.497793 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 02:07:56.497917 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 02:07:56.503372 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 02:07:56.503820 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 02:07:56.503922 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 02:07:56.503950 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 02:07:56.506817 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 02:07:56.524715 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 02:07:56.536229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 02:07:56.540273 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 02:07:56.540312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 02:07:56.543951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 02:07:56.546468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 02:07:56.549522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 02:07:56.551913 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 02:07:56.556531 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 02:07:56.556629 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 02:07:56.559315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 02:07:56.561157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 02:07:56.562812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 02:07:56.564746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 02:07:56.566475 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 02:07:56.566504 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 02:07:56.566513 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 02:07:56.566560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 02:07:56.568743 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 02:07:56.573345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 02:07:56.580749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 02:07:56.584912 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 02:07:56.588163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 02:07:56.592249 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 02:07:56.592354 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 02:07:56.597215 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.597735 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.598157 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.599532 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.632965 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.646070 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.662196 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.677268 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.694553 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:56.696783 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:08:08.748589 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 02:08:08.748556062 +0000 UTC m=+12.285639089 I0420 02:08:09.495655 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 02:08:09.495642059 +0000 UTC m=+13.032725066 I0420 02:08:09.496163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:08:09.496267 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 02:08:09.496251794 +0000 UTC m=+13.033334821 I0420 02:08:09.511662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:09.511762 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 02:08:09.511753298 +0000 UTC m=+13.048836295 E0420 02:08:09.511778 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:08:09.511893 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 02:08:09.511884191 +0000 UTC m=+13.048967188 E0420 02:08:09.511918 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:08:09.523093 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 02:08:09.523208 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:08:09.523246 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:08:09.523321 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 02:08:09.528542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:09.548486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6gb8m" condition "Approved" to 2026-04-20 02:08:09.54846798 +0000 UTC m=+13.085550987 I0420 02:08:09.560579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6gb8m" condition "Ready" to 2026-04-20 02:08:09.560562967 +0000 UTC m=+13.097645974 I0420 02:08:09.585554 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:09.585538122 +0000 UTC m=+13.122621149 I0420 02:08:09.607652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:14.523685 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:14.523670363 +0000 UTC m=+18.060753350 I0420 02:08:36.017755 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 02:08:36.017738081 +0000 UTC m=+39.554821078 I0420 02:08:36.017902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:08:36.017968 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 02:08:36.017954517 +0000 UTC m=+39.555037514 I0420 02:08:36.029361 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 02:08:36.029343766 +0000 UTC m=+39.566426793 I0420 02:08:36.041288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:36.041398 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 02:08:36.041390922 +0000 UTC m=+39.578473899 I0420 02:08:36.245324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:36.280049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t4h2l" condition "Approved" to 2026-04-20 02:08:36.280023613 +0000 UTC m=+39.817106640 I0420 02:08:36.314738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t4h2l" condition "Ready" to 2026-04-20 02:08:36.314712674 +0000 UTC m=+39.851795691 I0420 02:08:36.346045 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:36.34603179 +0000 UTC m=+39.883114797 I0420 02:08:36.371451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:36.371909 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:36.371899197 +0000 UTC m=+39.908982194 I0420 02:08:36.390310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:36.390738 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:36.390726955 +0000 UTC m=+39.927809952 I0420 02:08:36.390771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:23.705603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:10:23.705655 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 02:10:23.705639473 +0000 UTC m=+147.242722500 I0420 02:10:23.705763 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 02:10:23.705734136 +0000 UTC m=+147.242817153 E0420 02:10:23.722664 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:10:23.722722 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 02:10:23.722709797 +0000 UTC m=+147.259792814 I0420 02:10:23.722788 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:10:23.728229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:23.728421 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 02:10:23.728399445 +0000 UTC m=+147.265482442 E0420 02:10:23.735974 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 02:10:23.736191 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:10:23.736290 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 02:10:23.736360 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 02:10:23.746676 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 02:10:23.746663432 +0000 UTC m=+147.283746429 I0420 02:10:23.746811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:10:23.746853 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 02:10:23.746842927 +0000 UTC m=+147.283925954 I0420 02:10:23.761598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:23.761712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:10:23.761736 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 02:10:23.76172779 +0000 UTC m=+147.298810787 I0420 02:10:23.977168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:24.012600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-mmcfx" condition "Approved" to 2026-04-20 02:10:24.012586591 +0000 UTC m=+147.549669618 I0420 02:10:24.014406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:24.038587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-8mhq5" condition "Approved" to 2026-04-20 02:10:24.038545382 +0000 UTC m=+147.575628399 I0420 02:10:24.053389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-mmcfx" condition "Ready" to 2026-04-20 02:10:24.053376554 +0000 UTC m=+147.590459551 I0420 02:10:24.058230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-8mhq5" condition "Ready" to 2026-04-20 02:10:24.058205827 +0000 UTC m=+147.595288854 I0420 02:10:24.087758 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:10:24.087742767 +0000 UTC m=+147.624825784 I0420 02:10:24.113756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:24.174313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:28.737430 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:10:28.73740881 +0000 UTC m=+152.274491837 I0420 02:10:28.754638 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-8mhq5" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:10:28.754618548 +0000 UTC m=+152.291701565 I0420 02:10:28.786143 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:10:28.786110292 +0000 UTC m=+152.323193299 I0420 02:10:28.809784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:28.810381 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:10:28.810369795 +0000 UTC m=+152.347452812 I0420 02:10:28.815209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:28.829272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:10:28.829684 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:10:28.829673091 +0000 UTC m=+152.366756118 I0420 02:13:12.186869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-109.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:12.186900 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-04-20 02:13:12.186848452 +0000 UTC m=+315.723931469 I0420 02:13:12.186947 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Issuing" to 2026-04-20 02:13:12.186933444 +0000 UTC m=+315.724016471 I0420 02:13:12.209336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:12.209442 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready" to 2026-04-20 02:13:12.209431097 +0000 UTC m=+315.746514084 I0420 02:13:12.376197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:12.410683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-v6sdg" condition "Approved" to 2026-04-20 02:13:12.410670867 +0000 UTC m=+315.947753864 I0420 02:13:12.430322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-109.nip.io-tls-v6sdg" condition "Ready" to 2026-04-20 02:13:12.43030527 +0000 UTC m=+315.967388267 I0420 02:13:12.463726 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:12.463705542 +0000 UTC m=+316.000788569 I0420 02:13:12.486204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:12.486625 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-109.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:12.486615545 +0000 UTC m=+316.023698542 I0420 02:13:12.506521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-109.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-109.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.084903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:26.085009 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 02:14:26.084997077 +0000 UTC m=+389.622080074 I0420 02:14:26.085087 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 02:14:26.085062679 +0000 UTC m=+389.622145706 E0420 02:14:26.099069 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:14:26.099143 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 02:14:26.099129447 +0000 UTC m=+389.636212454 E0420 02:14:26.099217 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:14:26.103167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.103368 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 02:14:26.103356009 +0000 UTC m=+389.640439006 E0420 02:14:26.110472 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 02:14:26.110563 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:14:26.110587 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:14:26.110614 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 02:14:26.117412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.117494 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 02:14:26.117484738 +0000 UTC m=+389.654567745 I0420 02:14:26.123723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.128077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-plp5d" condition "Approved" to 2026-04-20 02:14:26.128064713 +0000 UTC m=+389.665147740 I0420 02:14:26.131732 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 02:14:26.131722601 +0000 UTC m=+389.668805608 I0420 02:14:26.143193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.144397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-plp5d" condition "Ready" to 2026-04-20 02:14:26.144384835 +0000 UTC m=+389.681467832 I0420 02:14:26.167759 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:26.167732846 +0000 UTC m=+389.704815873 I0420 02:14:26.192450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:31.111605 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:31.111591689 +0000 UTC m=+394.648674706 I0420 02:15:13.220453 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 02:15:13.220442296 +0000 UTC m=+436.757525283 I0420 02:15:13.220747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:15:13.220769 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 02:15:13.220765414 +0000 UTC m=+436.757848401 I0420 02:15:13.220938 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 02:15:13.220935238 +0000 UTC m=+436.758018225 I0420 02:15:13.221083 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:15:13.221264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:15:13.221286 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 02:15:13.221281946 +0000 UTC m=+436.758364923 I0420 02:15:13.221471 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 02:15:13.221466291 +0000 UTC m=+436.758549288 I0420 02:15:13.221100 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 02:15:13.221097392 +0000 UTC m=+436.758180369 I0420 02:15:13.252893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:13.253264 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 02:15:13.25325274 +0000 UTC m=+436.790335737 I0420 02:15:13.262234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:13.262532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:13.262662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:15:13.262730 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 02:15:13.262719167 +0000 UTC m=+436.799802194 I0420 02:15:13.262975 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 02:15:13.262960992 +0000 UTC m=+436.800043999 I0420 02:15:13.462924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:13.483038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pb6tk" condition "Approved" to 2026-04-20 02:15:13.483027562 +0000 UTC m=+437.020110539 I0420 02:15:13.496320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:13.508724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:13.510844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pb6tk" condition "Ready" to 2026-04-20 02:15:13.510829847 +0000 UTC m=+437.047912834 I0420 02:15:13.555828 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:13.555815502 +0000 UTC m=+437.092898489 I0420 02:15:13.577315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:13.577610 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:13.577602283 +0000 UTC m=+437.114685270 I0420 02:15:13.603196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gfg92" condition "Approved" to 2026-04-20 02:15:13.603180364 +0000 UTC m=+437.140263361 I0420 02:15:13.606490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:13.663009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gfg92" condition "Ready" to 2026-04-20 02:15:13.662997854 +0000 UTC m=+437.200080841 I0420 02:15:13.898945 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-gfg92" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-smsjj" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0420 02:15:14.205996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c7726" condition "Approved" to 2026-04-20 02:15:14.20598243 +0000 UTC m=+437.743065417 I0420 02:15:14.308967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-29lnt" condition "Approved" to 2026-04-20 02:15:14.308950911 +0000 UTC m=+437.846033898 I0420 02:15:14.365105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c7726" condition "Ready" to 2026-04-20 02:15:14.365096483 +0000 UTC m=+437.902179470 I0420 02:15:14.765218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-29lnt" condition "Ready" to 2026-04-20 02:15:14.765200726 +0000 UTC m=+438.302283733 E0420 02:15:15.194483 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-bsbkj\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0420 02:15:15.353906 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:15.353883446 +0000 UTC m=+438.890966433 I0420 02:15:15.453006 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-29lnt" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-prcr8" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0420 02:15:15.553230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:15.553714 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:15.553705142 +0000 UTC m=+439.090788139 I0420 02:15:16.064229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j7q5l" condition "Approved" to 2026-04-20 02:15:16.064202814 +0000 UTC m=+439.601285811 I0420 02:15:16.064368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:16.089164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j7q5l" condition "Ready" to 2026-04-20 02:15:16.08914538 +0000 UTC m=+439.626228377 I0420 02:15:16.553238 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:16.553219652 +0000 UTC m=+440.090302669 I0420 02:15:16.654167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:16.654632 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:16.654622825 +0000 UTC m=+440.191705822 I0420 02:15:16.904713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:16.992358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:22.400071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:15:22.400072 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" condition "Ready" to 2026-04-20 02:15:22.400044494 +0000 UTC m=+445.937127531 I0420 02:15:22.400110 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" condition "Issuing" to 2026-04-20 02:15:22.400102715 +0000 UTC m=+445.937185712 I0420 02:15:22.416166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lt65n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:22.416239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:15:22.416264 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" condition "Issuing" to 2026-04-20 02:15:22.416256021 +0000 UTC m=+445.953339018 I0420 02:15:22.563950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lt65n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:22.572642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lt65n-ktfrh" condition "Approved" to 2026-04-20 02:15:22.572604838 +0000 UTC m=+446.109687855 I0420 02:15:22.593761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lt65n-ktfrh" condition "Ready" to 2026-04-20 02:15:22.593741604 +0000 UTC m=+446.130824641 I0420 02:15:22.626483 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:22.626466786 +0000 UTC m=+446.163549783 I0420 02:15:22.646674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lt65n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:22.647073 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:22.647065768 +0000 UTC m=+446.184148765 I0420 02:15:22.663329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lt65n-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:22.663680 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lt65n-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:22.663671775 +0000 UTC m=+446.200754772 I0420 02:15:53.552722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:15:53.552857 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 02:15:53.552843877 +0000 UTC m=+477.089926894 I0420 02:15:53.552775 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 02:15:53.552755205 +0000 UTC m=+477.089838202 I0420 02:15:53.571429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:53.571601 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 02:15:53.571585673 +0000 UTC m=+477.108668700 I0420 02:15:53.829618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:53.898244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mnvhz" condition "Approved" to 2026-04-20 02:15:53.898226288 +0000 UTC m=+477.435309295 I0420 02:15:53.976333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mnvhz" condition "Ready" to 2026-04-20 02:15:53.976317022 +0000 UTC m=+477.513400049 I0420 02:15:54.052724 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:54.052705746 +0000 UTC m=+477.589788763 I0420 02:15:54.074512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:54.074775 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:15:54.07476796 +0000 UTC m=+477.611850947 I0420 02:15:54.083230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:15:54.095876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:16.697117 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 02:19:16.697079139 +0000 UTC m=+680.234162136 I0420 02:19:16.697264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:19:16.697288 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 02:19:16.697282404 +0000 UTC m=+680.234365391 I0420 02:19:16.714876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:16.715050 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 02:19:16.715042085 +0000 UTC m=+680.252125092 I0420 02:19:17.034947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:17.075130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-78hqq" condition "Approved" to 2026-04-20 02:19:17.075119142 +0000 UTC m=+680.612202129 I0420 02:19:17.096709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-78hqq" condition "Ready" to 2026-04-20 02:19:17.096692945 +0000 UTC m=+680.633775942 I0420 02:19:17.126365 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:19:17.126342828 +0000 UTC m=+680.663425855 I0420 02:19:17.152060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:17.152482 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:19:17.152475489 +0000 UTC m=+680.689558466 I0420 02:19:17.176915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:54.150973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:21:54.151067 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 02:21:54.151031052 +0000 UTC m=+837.688114039 I0420 02:21:54.151133 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 02:21:54.151112574 +0000 UTC m=+837.688195591 I0420 02:21:54.173319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:54.173427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:21:54.173495 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 02:21:54.173485644 +0000 UTC m=+837.710568631 I0420 02:21:54.427830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:54.439613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bcp5s" condition "Approved" to 2026-04-20 02:21:54.439602193 +0000 UTC m=+837.976685210 I0420 02:21:54.459772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bcp5s" condition "Ready" to 2026-04-20 02:21:54.45974877 +0000 UTC m=+837.996831787 I0420 02:21:54.502133 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:21:54.502016432 +0000 UTC m=+838.039099429 I0420 02:21:54.529599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:54.530096 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:21:54.530085808 +0000 UTC m=+838.067168835 I0420 02:21:54.559876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:54.560803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:02.700144 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 02:23:02.700107258 +0000 UTC m=+906.237190275 I0420 02:23:02.700128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:23:02.700286 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 02:23:02.700280483 +0000 UTC m=+906.237363490 I0420 02:23:02.732691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:02.732812 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 02:23:02.732798634 +0000 UTC m=+906.269881651 I0420 02:23:02.952043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:02.992029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5dp4p" condition "Approved" to 2026-04-20 02:23:02.992012491 +0000 UTC m=+906.529095488 I0420 02:23:03.018598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5dp4p" condition "Ready" to 2026-04-20 02:23:03.018583301 +0000 UTC m=+906.555666308 I0420 02:23:03.060467 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:23:03.060449604 +0000 UTC m=+906.597532591 I0420 02:23:03.101247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:03.101712 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:23:03.101699733 +0000 UTC m=+906.638782760 I0420 02:23:03.119224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:03.135821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:03.136034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:03.136426 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:23:03.136415236 +0000 UTC m=+906.673498233 I0420 02:26:14.963093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:26:14.963194 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 02:26:14.963155181 +0000 UTC m=+1098.500238178 I0420 02:26:14.963884 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 02:26:14.96309623 +0000 UTC m=+1098.500179247 I0420 02:26:14.982110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:26:14.982187 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 02:26:14.982179892 +0000 UTC m=+1098.519262899 I0420 02:26:15.216593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:26:15.249438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fdzh7" condition "Approved" to 2026-04-20 02:26:15.249424843 +0000 UTC m=+1098.786507830 I0420 02:26:15.276097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fdzh7" condition "Ready" to 2026-04-20 02:26:15.276086715 +0000 UTC m=+1098.813169712 I0420 02:26:15.332453 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:26:15.33243105 +0000 UTC m=+1098.869514067 I0420 02:26:15.356772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:26:15.357259 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:26:15.357253088 +0000 UTC m=+1098.894336085 I0420 02:26:15.360308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:26:15.375618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:26:15.375837 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:26:15.375831108 +0000 UTC m=+1098.912914105