I0413 17:11:35.759672 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 17:11:35.759776 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 17:11:35.759839 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 17:11:35.763464 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 17:11:35.763831 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 17:11:35.763989 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 17:11:35.764034 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 17:11:35.766591 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 17:11:35.782328 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 17:11:35.786637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 17:11:35.792699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 17:11:35.796638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 17:11:35.798947 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 17:11:35.799012 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 17:11:35.801304 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 17:11:35.801378 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 17:11:35.803747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 17:11:35.807323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 17:11:35.810459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 17:11:35.813951 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 17:11:35.813974 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 17:11:35.814025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 17:11:35.815846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 17:11:35.818857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 17:11:35.821639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 17:11:35.823350 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 17:11:35.825363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 17:11:35.827193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 17:11:35.828921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 17:11:35.830708 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 17:11:35.830726 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 17:11:35.830975 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 17:11:35.836883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 17:11:35.839005 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.840341 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.840339 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.859153 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.876576 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.893641 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.911339 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.929775 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.931665 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:35.948804 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 17:11:47.818212 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 17:11:47.818196081 +0000 UTC m=+12.093784871 I0413 17:11:48.549389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:11:48.549456 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 17:11:48.549447501 +0000 UTC m=+12.825036321 I0413 17:11:48.549558 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 17:11:48.549538224 +0000 UTC m=+12.825127084 I0413 17:11:48.574866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:48.574952 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 17:11:48.574944242 +0000 UTC m=+12.850533042 E0413 17:11:48.589003 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:11:48.589085 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 17:11:48.589078897 +0000 UTC m=+12.864667677 E0413 17:11:48.589106 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:11:48.617061 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 17:11:48.617183 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:11:48.617221 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:11:48.617265 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 17:11:48.621027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:48.688761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tcc6g" condition "Approved" to 2026-04-13 17:11:48.688740566 +0000 UTC m=+12.964329396 I0413 17:11:48.740534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tcc6g" condition "Ready" to 2026-04-13 17:11:48.740497629 +0000 UTC m=+13.016086449 I0413 17:11:48.773333 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:11:48.773318551 +0000 UTC m=+13.048907381 I0413 17:11:48.814032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:48.814301 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:11:48.814294805 +0000 UTC m=+13.089883595 I0413 17:11:48.834216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:11:53.617460 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:11:53.617443884 +0000 UTC m=+17.893032674 I0413 17:12:12.515722 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 17:12:12.515699585 +0000 UTC m=+36.791288435 I0413 17:12:12.516099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:12.516160 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 17:12:12.516150707 +0000 UTC m=+36.791739517 I0413 17:12:12.528007 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 17:12:12.527944135 +0000 UTC m=+36.803532965 I0413 17:12:12.538557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:12.538671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:12:12.538709 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 17:12:12.538702593 +0000 UTC m=+36.814291393 I0413 17:12:12.730878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-m44mv" condition "Approved" to 2026-04-13 17:12:12.730864781 +0000 UTC m=+37.006453611 I0413 17:12:12.759610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-m44mv" condition "Ready" to 2026-04-13 17:12:12.759598743 +0000 UTC m=+37.035187553 I0413 17:12:12.788774 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:12.788758998 +0000 UTC m=+37.064347798 I0413 17:12:12.809189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:12.809558 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:12.809551283 +0000 UTC m=+37.085140103 I0413 17:12:12.833715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:12:12.834027 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:12:12.834019733 +0000 UTC m=+37.109608523 I0413 17:13:56.967697 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-13 17:13:56.967670821 +0000 UTC m=+141.243259651 I0413 17:13:56.967768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:13:56.967853 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 17:13:56.967834106 +0000 UTC m=+141.243422926 E0413 17:13:56.988144 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 17:13:56.988208 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-13 17:13:56.988197648 +0000 UTC m=+141.263786478 I0413 17:13:56.988270 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 17:13:56.991199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:13:56.991319 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-13 17:13:56.991308917 +0000 UTC m=+141.266897737 E0413 17:13:57.004494 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0413 17:13:57.004677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:13:57.004664 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-13 17:13:57.004650629 +0000 UTC m=+141.280239439 I0413 17:13:57.004731 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 17:13:57.004718701 +0000 UTC m=+141.280307531 E0413 17:13:57.004796 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 17:13:57.004874 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0413 17:13:57.004954 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0413 17:13:57.029845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:13:57.029961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:13:57.029983 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 17:13:57.029975814 +0000 UTC m=+141.305564604 I0413 17:13:57.101106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:13:57.135749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6r24x" condition "Approved" to 2026-04-13 17:13:57.135724 +0000 UTC m=+141.411312890 I0413 17:13:57.176531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6r24x" condition "Ready" to 2026-04-13 17:13:57.176517776 +0000 UTC m=+141.452106576 I0413 17:13:57.220299 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:13:57.220286239 +0000 UTC m=+141.495875029 I0413 17:13:57.241352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:13:57.241901 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:13:57.241891588 +0000 UTC m=+141.517480408 I0413 17:13:57.267778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:13:57.268919 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:13:57.26889335 +0000 UTC m=+141.544482150 I0413 17:13:57.274161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5wk8b" condition "Approved" to 2026-04-13 17:13:57.27414642 +0000 UTC m=+141.549735230 I0413 17:13:57.296373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5wk8b" condition "Ready" to 2026-04-13 17:13:57.296353705 +0000 UTC m=+141.571942495 I0413 17:14:02.005960 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:02.005891471 +0000 UTC m=+146.281480301 I0413 17:14:02.020868 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-5wk8b" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:02.02085139 +0000 UTC m=+146.296440190 I0413 17:14:02.056651 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:02.056636563 +0000 UTC m=+146.332225353 I0413 17:14:02.077962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:14:02.078470 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:14:02.078460148 +0000 UTC m=+146.354048938 I0413 17:14:02.101051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:45.489636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-52.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:16:45.489667 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-52.nip.io-tls" condition "Issuing" to 2026-04-13 17:16:45.48966124 +0000 UTC m=+309.765250020 I0413 17:16:45.489694 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-52.nip.io-tls" condition "Ready" to 2026-04-13 17:16:45.48967732 +0000 UTC m=+309.765266130 I0413 17:16:45.515501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:45.515658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-52.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:16:45.515704 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-52.nip.io-tls" condition "Issuing" to 2026-04-13 17:16:45.515696388 +0000 UTC m=+309.791285188 I0413 17:16:45.752994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-52.nip.io-tls-cthl7" condition "Approved" to 2026-04-13 17:16:45.752972414 +0000 UTC m=+310.028561244 I0413 17:16:45.772631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-52.nip.io-tls-cthl7" condition "Ready" to 2026-04-13 17:16:45.77261704 +0000 UTC m=+310.048205860 I0413 17:16:45.804980 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-52.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:45.804959397 +0000 UTC m=+310.080548227 I0413 17:16:45.827684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:45.828148 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-52.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:45.828139179 +0000 UTC m=+310.103727979 I0413 17:16:45.837936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:45.850281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:45.853185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:16:45.853703 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-52.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:16:45.853691042 +0000 UTC m=+310.129279862 I0413 17:17:58.103307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:17:58.103360 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 17:17:58.103355091 +0000 UTC m=+382.378943881 I0413 17:17:58.103349 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 17:17:58.1033329 +0000 UTC m=+382.378921690 E0413 17:17:58.123164 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:17:58.123205 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 17:17:58.1231978 +0000 UTC m=+382.398786600 E0413 17:17:58.123275 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 17:17:58.126211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:17:58.126295 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 17:17:58.126287148 +0000 UTC m=+382.401875948 E0413 17:17:58.134152 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 17:17:58.134927 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:17:58.135119 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 17:17:58.135337 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 17:17:58.146376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:17:58.168880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jzgcd" condition "Approved" to 2026-04-13 17:17:58.168863517 +0000 UTC m=+382.444452317 I0413 17:17:58.182990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jzgcd" condition "Ready" to 2026-04-13 17:17:58.182978471 +0000 UTC m=+382.458567271 I0413 17:17:58.206413 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:17:58.206387963 +0000 UTC m=+382.481976753 I0413 17:17:58.223591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:17:58.224103 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:17:58.224096039 +0000 UTC m=+382.499684849 I0413 17:17:58.233620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:17:58.262808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:03.134937 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:03.134919077 +0000 UTC m=+387.410507907 I0413 17:18:43.002610 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 17:18:43.002596349 +0000 UTC m=+427.278185179 I0413 17:18:43.005538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:43.005572 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 17:18:43.005564024 +0000 UTC m=+427.281152844 I0413 17:18:43.008736 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 17:18:43.008725895 +0000 UTC m=+427.284314695 I0413 17:18:43.009071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:43.009095 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 17:18:43.009090585 +0000 UTC m=+427.284679385 I0413 17:18:43.036351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:43.036403 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 17:18:43.036392055 +0000 UTC m=+427.311980845 I0413 17:18:43.037055 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 17:18:43.037049803 +0000 UTC m=+427.312638593 I0413 17:18:43.041501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:43.041591 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:43.041654 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 17:18:43.041645654 +0000 UTC m=+427.317234464 I0413 17:18:43.042525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:43.042616 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 17:18:43.042610582 +0000 UTC m=+427.318199382 I0413 17:18:43.061922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:43.062145 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 17:18:43.062136529 +0000 UTC m=+427.337725319 I0413 17:18:43.147073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:43.209421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-884r8" condition "Approved" to 2026-04-13 17:18:43.209404504 +0000 UTC m=+427.484993334 I0413 17:18:43.227800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-884r8" condition "Ready" to 2026-04-13 17:18:43.22778716 +0000 UTC m=+427.503375960 I0413 17:18:43.257971 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:43.257959491 +0000 UTC m=+427.533548281 I0413 17:18:43.297583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:43.310819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:43.320173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4mnww" condition "Approved" to 2026-04-13 17:18:43.320157437 +0000 UTC m=+427.595746227 I0413 17:18:43.347473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4mnww" condition "Ready" to 2026-04-13 17:18:43.347457317 +0000 UTC m=+427.623046127 I0413 17:18:43.443985 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:43.443957672 +0000 UTC m=+427.719546472 I0413 17:18:43.541387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:44.048326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6x5wm" condition "Approved" to 2026-04-13 17:18:44.048315329 +0000 UTC m=+428.323904119 I0413 17:18:44.199318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6x5wm" condition "Ready" to 2026-04-13 17:18:44.199302481 +0000 UTC m=+428.474891311 I0413 17:18:44.591595 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-6x5wm" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-ggb2r" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0413 17:18:44.798235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pkdlw" condition "Approved" to 2026-04-13 17:18:44.7981563 +0000 UTC m=+429.073745100 I0413 17:18:45.153419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pkdlw" condition "Ready" to 2026-04-13 17:18:45.153402464 +0000 UTC m=+429.428991294 I0413 17:18:45.342035 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:45.34201036 +0000 UTC m=+429.617599170 I0413 17:18:45.443878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:51.469961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:51.470015 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" condition "Issuing" to 2026-04-13 17:18:51.47000239 +0000 UTC m=+435.745591210 I0413 17:18:51.470121 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" condition "Ready" to 2026-04-13 17:18:51.469966949 +0000 UTC m=+435.745555779 I0413 17:18:51.490070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:51.490211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:18:51.490251 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" condition "Issuing" to 2026-04-13 17:18:51.490238167 +0000 UTC m=+435.765826997 I0413 17:18:51.718755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:51.730242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gkgbk-wkzmz" condition "Approved" to 2026-04-13 17:18:51.730227141 +0000 UTC m=+436.005815921 I0413 17:18:51.749680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gkgbk-wkzmz" condition "Ready" to 2026-04-13 17:18:51.749663206 +0000 UTC m=+436.025252036 I0413 17:18:51.780409 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:51.780390773 +0000 UTC m=+436.055979593 I0413 17:18:51.810380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:51.810803 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:51.810796232 +0000 UTC m=+436.086385042 I0413 17:18:51.832693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:51.838108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:18:51.838399 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gkgbk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:18:51.838393899 +0000 UTC m=+436.113982689 I0413 17:19:23.960236 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 17:19:23.960220915 +0000 UTC m=+468.235809715 I0413 17:19:23.960620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:19:23.960639 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 17:19:23.960634676 +0000 UTC m=+468.236223476 I0413 17:19:23.998061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:19:23.998169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:19:23.998193 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 17:19:23.998187058 +0000 UTC m=+468.273775848 I0413 17:19:24.173001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:19:24.180803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ww7xd" condition "Approved" to 2026-04-13 17:19:24.180790143 +0000 UTC m=+468.456378943 I0413 17:19:24.200145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ww7xd" condition "Ready" to 2026-04-13 17:19:24.200135276 +0000 UTC m=+468.475724076 I0413 17:19:24.234822 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:19:24.234805805 +0000 UTC m=+468.510394605 I0413 17:19:24.257854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:19:24.258308 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:19:24.258296736 +0000 UTC m=+468.533885536 I0413 17:19:24.275882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:19:24.277496 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:19:24.277481564 +0000 UTC m=+468.553070394 I0413 17:22:37.668119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:22:37.668169 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 17:22:37.66816388 +0000 UTC m=+661.943752680 I0413 17:22:37.668131 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 17:22:37.668110999 +0000 UTC m=+661.943699829 I0413 17:22:37.686488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:37.686589 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 17:22:37.686580503 +0000 UTC m=+661.962169313 I0413 17:22:37.858626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:37.893079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nppqm" condition "Approved" to 2026-04-13 17:22:37.893038791 +0000 UTC m=+662.168627591 I0413 17:22:37.914054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nppqm" condition "Ready" to 2026-04-13 17:22:37.914041199 +0000 UTC m=+662.189629989 I0413 17:22:37.943241 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:22:37.943227763 +0000 UTC m=+662.218816593 I0413 17:22:37.964491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:37.965865 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:22:37.965850856 +0000 UTC m=+662.241439646 I0413 17:22:37.989915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:37.997895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:22:37.998422 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:22:37.998412898 +0000 UTC m=+662.274001698 I0413 17:25:02.570221 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-13 17:25:02.570166837 +0000 UTC m=+806.845755637 I0413 17:25:02.570471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:25:02.570540 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-13 17:25:02.570530808 +0000 UTC m=+806.846119628 I0413 17:25:02.587304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:25:02.587396 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-13 17:25:02.587389174 +0000 UTC m=+806.862977974 I0413 17:25:02.809822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:25:02.846615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-lfh77" condition "Approved" to 2026-04-13 17:25:02.846600323 +0000 UTC m=+807.122189153 I0413 17:25:02.870556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-lfh77" condition "Ready" to 2026-04-13 17:25:02.870542254 +0000 UTC m=+807.146131084 I0413 17:25:02.903685 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:25:02.903673531 +0000 UTC m=+807.179262331 I0413 17:25:02.930205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:25:02.982973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:03.390397 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-13 17:26:03.390385423 +0000 UTC m=+867.665974223 I0413 17:26:03.390429 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:26:03.390478 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 17:26:03.390469445 +0000 UTC m=+867.666058245 I0413 17:26:03.409538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:03.409676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:26:03.409702 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 17:26:03.40969423 +0000 UTC m=+867.685283030 I0413 17:26:03.567415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:03.575388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-lj988" condition "Approved" to 2026-04-13 17:26:03.575374006 +0000 UTC m=+867.850962806 I0413 17:26:03.593065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-lj988" condition "Ready" to 2026-04-13 17:26:03.593051607 +0000 UTC m=+867.868640397 I0413 17:26:03.625456 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:26:03.625444113 +0000 UTC m=+867.901032913 I0413 17:26:03.644178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:03.644657 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:26:03.644645668 +0000 UTC m=+867.920234498 I0413 17:26:03.656788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:26:03.666093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:29:02.868409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 17:29:02.868473 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-13 17:29:02.868464346 +0000 UTC m=+1047.144053146 I0413 17:29:02.868409 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-13 17:29:02.868379484 +0000 UTC m=+1047.143968314 I0413 17:29:02.884658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:29:02.884746 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-13 17:29:02.884738004 +0000 UTC m=+1047.160326804 I0413 17:29:03.220793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:29:03.258422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xmmsp" condition "Approved" to 2026-04-13 17:29:03.258410265 +0000 UTC m=+1047.533999065 I0413 17:29:03.278385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xmmsp" condition "Ready" to 2026-04-13 17:29:03.27837577 +0000 UTC m=+1047.553964560 I0413 17:29:03.314168 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:29:03.314157127 +0000 UTC m=+1047.589745927 I0413 17:29:03.344445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 17:29:03.344814 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 17:29:03.344800928 +0000 UTC m=+1047.620389718 I0413 17:29:03.363574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"