I0313 23:03:42.528571 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0313 23:03:42.528739 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0313 23:03:42.529046 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0313 23:03:42.536431 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0313 23:03:42.536912 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0313 23:03:42.537038 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0313 23:03:42.537145 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0313 23:03:42.539675 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0313 23:03:42.558381 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0313 23:03:42.562682 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0313 23:03:42.565741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0313 23:03:42.572164 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0313 23:03:42.572405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0313 23:03:42.575222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0313 23:03:42.577895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0313 23:03:42.580270 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0313 23:03:42.582069 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0313 23:03:42.582090 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0313 23:03:42.582255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0313 23:03:42.584377 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0313 23:03:42.586093 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0313 23:03:42.586138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0313 23:03:42.591807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0313 23:03:42.595840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0313 23:03:42.598299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0313 23:03:42.600578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0313 23:03:42.602758 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0313 23:03:42.602841 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0313 23:03:42.605330 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0313 23:03:42.607836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0313 23:03:42.609898 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0313 23:03:42.611588 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0313 23:03:42.614681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0313 23:03:42.615628 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.620883 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.620875 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.621123 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.621172 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.621390 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.621874 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.621903 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.623133 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:42.649930 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 23:03:56.767613 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-13 23:03:56.767563342 +0000 UTC m=+14.272556685 I0313 23:03:57.487783 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-13 23:03:57.487736392 +0000 UTC m=+14.992729725 I0313 23:03:57.488089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:03:57.488260 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-13 23:03:57.488242833 +0000 UTC m=+14.993236166 E0313 23:03:57.505170 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 23:03:57.505272 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-13 23:03:57.505261317 +0000 UTC m=+15.010254650 E0313 23:03:57.505308 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 23:03:57.507458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:03:57.507559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:03:57.507596 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-13 23:03:57.507586818 +0000 UTC m=+15.012580141 E0313 23:03:57.518290 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0313 23:03:57.519280 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 23:03:57.519730 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 23:03:57.519949 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0313 23:03:57.552364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vchhw" condition "Approved" to 2026-03-13 23:03:57.552328012 +0000 UTC m=+15.057321315 I0313 23:03:57.566183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vchhw" condition "Ready" to 2026-03-13 23:03:57.566160876 +0000 UTC m=+15.071154219 I0313 23:03:57.593665 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:03:57.59364143 +0000 UTC m=+15.098634773 I0313 23:03:57.610567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:03:57.658360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:04:02.519548 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:04:02.519535726 +0000 UTC m=+20.024529039 I0313 23:04:25.492091 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-13 23:04:25.4920736 +0000 UTC m=+42.997066913 I0313 23:04:25.492300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:04:25.492395 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-13 23:04:25.492380327 +0000 UTC m=+42.997373660 I0313 23:04:25.510192 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-13 23:04:25.510177218 +0000 UTC m=+43.015170531 I0313 23:04:25.550472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:04:25.550560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:04:25.550598 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-13 23:04:25.550592086 +0000 UTC m=+43.055585389 I0313 23:04:25.706846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fpffw" condition "Approved" to 2026-03-13 23:04:25.706829101 +0000 UTC m=+43.211822444 I0313 23:04:25.737338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fpffw" condition "Ready" to 2026-03-13 23:04:25.737322451 +0000 UTC m=+43.242315754 I0313 23:04:25.768968 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:04:25.768933986 +0000 UTC m=+43.273927319 I0313 23:04:25.791255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:04:25.791726 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:04:25.791713317 +0000 UTC m=+43.296706630 I0313 23:04:25.814630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:34.877428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:06:34.877783 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-13 23:06:34.877753051 +0000 UTC m=+172.382746384 I0313 23:06:34.878060 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-13 23:06:34.878040998 +0000 UTC m=+172.383034341 E0313 23:06:34.893629 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 23:06:34.893760 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-13 23:06:34.893748999 +0000 UTC m=+172.398742312 I0313 23:06:34.893799 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 23:06:34.898414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:34.898497 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-13 23:06:34.898489762 +0000 UTC m=+172.403483065 E0313 23:06:34.904307 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0313 23:06:34.904506 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 23:06:34.904592 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0313 23:06:34.904673 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0313 23:06:34.908288 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-13 23:06:34.908267734 +0000 UTC m=+172.413261047 I0313 23:06:34.908490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:06:34.908559 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-13 23:06:34.90854907 +0000 UTC m=+172.413542403 I0313 23:06:34.924117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:34.924238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:06:34.924266 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-13 23:06:34.924258211 +0000 UTC m=+172.429251524 I0313 23:06:35.148475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:35.181070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pcsgf" condition "Approved" to 2026-03-13 23:06:35.181038329 +0000 UTC m=+172.686031772 I0313 23:06:35.218073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pcsgf" condition "Ready" to 2026-03-13 23:06:35.218057563 +0000 UTC m=+172.723050876 I0313 23:06:35.248331 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:06:35.248314621 +0000 UTC m=+172.753307964 I0313 23:06:35.264802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:35.266298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:35.266598 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:06:35.266592518 +0000 UTC m=+172.771585831 I0313 23:06:35.273169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cdv28" condition "Approved" to 2026-03-13 23:06:35.27315191 +0000 UTC m=+172.778145253 I0313 23:06:35.285719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:35.289794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:35.291688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cdv28" condition "Ready" to 2026-03-13 23:06:35.291676742 +0000 UTC m=+172.796670045 I0313 23:06:39.905823 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:06:39.905804706 +0000 UTC m=+177.410798059 I0313 23:06:39.922298 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-cdv28" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:06:39.922279854 +0000 UTC m=+177.427273157 I0313 23:06:39.954477 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:06:39.954456173 +0000 UTC m=+177.459449496 I0313 23:06:39.977001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:39.977539 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:06:39.977526594 +0000 UTC m=+177.482519937 I0313 23:06:40.000181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:06:40.000671 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:06:40.000661567 +0000 UTC m=+177.505654910 I0313 23:09:26.511116 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-03-13 23:09:26.511078527 +0000 UTC m=+344.016071840 I0313 23:09:26.511209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:09:26.511272 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Issuing" to 2026-03-13 23:09:26.511259171 +0000 UTC m=+344.016252524 I0313 23:09:26.530708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:09:26.530949 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready" to 2026-03-13 23:09:26.530936939 +0000 UTC m=+344.035930292 I0313 23:09:26.645218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:09:26.675947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-b49c7" condition "Approved" to 2026-03-13 23:09:26.675934723 +0000 UTC m=+344.180928046 I0313 23:09:26.694377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-23.nip.io-tls-b49c7" condition "Ready" to 2026-03-13 23:09:26.694366901 +0000 UTC m=+344.199360204 I0313 23:09:26.721412 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:09:26.72138252 +0000 UTC m=+344.226375853 I0313 23:09:26.740653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:09:26.741242 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:09:26.741232012 +0000 UTC m=+344.246225345 I0313 23:09:26.751457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:09:26.765101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:10:39.738283 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:10:39.738315 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-13 23:10:39.738289365 +0000 UTC m=+417.243282698 I0313 23:10:39.738373 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-13 23:10:39.738362967 +0000 UTC m=+417.243356280 E0313 23:10:39.750779 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 23:10:39.750885 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-13 23:10:39.750875718 +0000 UTC m=+417.255869061 E0313 23:10:39.750918 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 23:10:39.753487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:10:39.753641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:10:39.753747 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-13 23:10:39.753673933 +0000 UTC m=+417.258667266 E0313 23:10:39.763841 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0313 23:10:39.763928 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 23:10:39.764041 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 23:10:39.764083 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0313 23:10:39.788439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:10:39.794074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xfgc5" condition "Approved" to 2026-03-13 23:10:39.794059071 +0000 UTC m=+417.299052384 I0313 23:10:39.807847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xfgc5" condition "Ready" to 2026-03-13 23:10:39.807827961 +0000 UTC m=+417.312821304 I0313 23:10:39.837045 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:10:39.837023299 +0000 UTC m=+417.342016632 I0313 23:10:39.853987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:10:39.854564 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:10:39.854551896 +0000 UTC m=+417.359545209 I0313 23:10:39.873805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:10:39.874211 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:10:39.874199423 +0000 UTC m=+417.379192736 I0313 23:10:39.877441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:10:44.764204 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:10:44.764193657 +0000 UTC m=+422.269186950 I0313 23:11:23.187557 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-13 23:11:23.187548547 +0000 UTC m=+460.692541850 I0313 23:11:23.187215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:11:23.188416 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-13 23:11:23.188411707 +0000 UTC m=+460.693405030 I0313 23:11:23.197229 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-13 23:11:23.197218501 +0000 UTC m=+460.702211804 I0313 23:11:23.200130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:11:23.200172 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 23:11:23.20016416 +0000 UTC m=+460.705157453 I0313 23:11:23.200727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:11:23.200749 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-13 23:11:23.200745673 +0000 UTC m=+460.705738976 I0313 23:11:23.200932 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-13 23:11:23.200927547 +0000 UTC m=+460.705920850 I0313 23:11:23.245695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.245869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:11:23.245940 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-13 23:11:23.245930452 +0000 UTC m=+460.750923785 I0313 23:11:23.261287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.261494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:11:23.261548 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-13 23:11:23.261531014 +0000 UTC m=+460.766524347 I0313 23:11:23.262006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.262061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:11:23.262086 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 23:11:23.262080227 +0000 UTC m=+460.767073560 I0313 23:11:23.478783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-82ksn" condition "Approved" to 2026-03-13 23:11:23.478762356 +0000 UTC m=+460.983755689 I0313 23:11:23.507311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-82ksn" condition "Ready" to 2026-03-13 23:11:23.507294198 +0000 UTC m=+461.012287501 I0313 23:11:23.520729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pgbxt" condition "Approved" to 2026-03-13 23:11:23.520717089 +0000 UTC m=+461.025710392 I0313 23:11:23.539488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pgbxt" condition "Ready" to 2026-03-13 23:11:23.539477865 +0000 UTC m=+461.044471158 I0313 23:11:23.540085 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:23.540073448 +0000 UTC m=+461.045066761 I0313 23:11:23.561057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.563451 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:23.563443251 +0000 UTC m=+461.068436564 I0313 23:11:23.569139 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:23.569135293 +0000 UTC m=+461.074128596 I0313 23:11:23.574659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.624616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.625015 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:23.6250037 +0000 UTC m=+461.129997043 I0313 23:11:23.726659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.726960 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:23.726953666 +0000 UTC m=+461.231946969 I0313 23:11:23.774261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.838187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:23.886779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t5q4w" condition "Approved" to 2026-03-13 23:11:23.886767635 +0000 UTC m=+461.391760948 I0313 23:11:24.274635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t5q4w" condition "Ready" to 2026-03-13 23:11:24.274617626 +0000 UTC m=+461.779610959 I0313 23:11:24.594117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:24.594676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:24.857345 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:24.85732929 +0000 UTC m=+462.362322623 I0313 23:11:24.923506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:24.923935 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:24.923926266 +0000 UTC m=+462.428919579 I0313 23:11:25.140697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:39.443892 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" condition "Ready" to 2026-03-13 23:11:39.443875559 +0000 UTC m=+476.948868872 I0313 23:11:39.444098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:11:39.444191 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" condition "Issuing" to 2026-03-13 23:11:39.444179306 +0000 UTC m=+476.949172649 I0313 23:11:39.467067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-whnf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:39.467237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:11:39.467282 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" condition "Issuing" to 2026-03-13 23:11:39.467270142 +0000 UTC m=+476.972263485 I0313 23:11:39.653073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-whnf7-dtknt" condition "Approved" to 2026-03-13 23:11:39.653054393 +0000 UTC m=+477.158047736 I0313 23:11:39.676558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-whnf7-dtknt" condition "Ready" to 2026-03-13 23:11:39.676543779 +0000 UTC m=+477.181537092 I0313 23:11:39.743943 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:39.743911072 +0000 UTC m=+477.248904385 I0313 23:11:39.802838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-whnf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:39.803354 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:11:39.803347012 +0000 UTC m=+477.308340325 I0313 23:11:39.921430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-whnf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:11:39.938090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-whnf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-whnf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:12:27.710134 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:12:27.710182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-13 23:12:27.710172727 +0000 UTC m=+525.215166030 I0313 23:12:27.710174 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-13 23:12:27.710080115 +0000 UTC m=+525.215073438 I0313 23:12:27.732991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:12:27.733148 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-13 23:12:27.733120151 +0000 UTC m=+525.238113464 I0313 23:12:28.312419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:12:28.948819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-55z9k" condition "Approved" to 2026-03-13 23:12:28.948795113 +0000 UTC m=+526.453788457 I0313 23:12:29.199954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-55z9k" condition "Ready" to 2026-03-13 23:12:29.19993979 +0000 UTC m=+526.704933133 I0313 23:12:29.285690 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:12:29.285668032 +0000 UTC m=+526.790661375 I0313 23:12:29.309292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:12:29.309819 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:12:29.309810844 +0000 UTC m=+526.814804157 I0313 23:12:29.319752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:12:29.328321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:15:57.611885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:15:57.611979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-13 23:15:57.611967916 +0000 UTC m=+735.116961259 I0313 23:15:57.612022 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-13 23:15:57.611993006 +0000 UTC m=+735.116986339 I0313 23:15:57.630223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:15:57.630294 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:15:57.630320 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-13 23:15:57.630311645 +0000 UTC m=+735.135304958 I0313 23:15:58.023123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wfbzh" condition "Approved" to 2026-03-13 23:15:58.023110345 +0000 UTC m=+735.528103658 I0313 23:15:58.043388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wfbzh" condition "Ready" to 2026-03-13 23:15:58.04337265 +0000 UTC m=+735.548365993 I0313 23:15:58.071500 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:15:58.071490348 +0000 UTC m=+735.576483661 I0313 23:15:58.094026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:18:21.028040 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-13 23:18:21.027927044 +0000 UTC m=+878.532920387 I0313 23:18:21.028147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:18:21.028163 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-13 23:18:21.02815851 +0000 UTC m=+878.533151813 I0313 23:18:21.045087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:18:21.045159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:18:21.045174 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-13 23:18:21.045168666 +0000 UTC m=+878.550161979 I0313 23:18:21.287277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:18:21.294165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-lpx5j" condition "Approved" to 2026-03-13 23:18:21.294148304 +0000 UTC m=+878.799141647 I0313 23:18:21.310694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-lpx5j" condition "Ready" to 2026-03-13 23:18:21.310677219 +0000 UTC m=+878.815670532 I0313 23:18:21.336141 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:18:21.336123221 +0000 UTC m=+878.841116534 I0313 23:18:21.363850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:18:21.422036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:19:49.743615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:19:49.743679 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-13 23:19:49.743671627 +0000 UTC m=+967.248664920 I0313 23:19:49.744279 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-13 23:19:49.744272921 +0000 UTC m=+967.249266224 I0313 23:19:49.809236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:19:49.809312 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-13 23:19:49.80930404 +0000 UTC m=+967.314297343 I0313 23:19:49.983191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:19:50.049097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xnptp" condition "Approved" to 2026-03-13 23:19:50.049086493 +0000 UTC m=+967.554079806 I0313 23:19:50.093780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xnptp" condition "Ready" to 2026-03-13 23:19:50.093764827 +0000 UTC m=+967.598758130 I0313 23:19:50.195071 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:19:50.195056554 +0000 UTC m=+967.700049867 I0313 23:19:50.265148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:19:50.265527 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:19:50.265520281 +0000 UTC m=+967.770513594 I0313 23:19:50.379234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:23:05.512084 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-13 23:23:05.512038203 +0000 UTC m=+1163.017031516 I0313 23:23:05.512120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 23:23:05.512199 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-13 23:23:05.512190116 +0000 UTC m=+1163.017183449 I0313 23:23:05.532193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:23:05.532334 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-13 23:23:05.532324976 +0000 UTC m=+1163.037318299 I0313 23:23:05.758326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 23:23:05.787271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-cdf6q" condition "Approved" to 2026-03-13 23:23:05.78725972 +0000 UTC m=+1163.292253033 I0313 23:23:05.805371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-cdf6q" condition "Ready" to 2026-03-13 23:23:05.805359242 +0000 UTC m=+1163.310352555 I0313 23:23:05.844316 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 23:23:05.84430611 +0000 UTC m=+1163.349299423 I0313 23:23:05.867970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"