I0318 10:12:36.728599 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0318 10:12:36.728814 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0318 10:12:36.728976 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0318 10:12:36.733147 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0318 10:12:36.733598 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0318 10:12:36.733702 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0318 10:12:36.733720 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0318 10:12:36.736192 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0318 10:12:36.752271 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0318 10:12:36.757511 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0318 10:12:36.757580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0318 10:12:36.761341 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0318 10:12:36.764207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0318 10:12:36.766777 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0318 10:12:36.766801 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0318 10:12:36.766838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0318 10:12:36.769076 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0318 10:12:36.769211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0318 10:12:36.771292 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0318 10:12:36.777083 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0318 10:12:36.779979 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0318 10:12:36.780008 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0318 10:12:36.780069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0318 10:12:36.782348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0318 10:12:36.784637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0318 10:12:36.787653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0318 10:12:36.790782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0318 10:12:36.792835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0318 10:12:36.795542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0318 10:12:36.799278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0318 10:12:36.802033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0318 10:12:36.804453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0318 10:12:36.807168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0318 10:12:36.809154 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.809729 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.810056 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.810074 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.832696 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.842914 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.850941 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.865523 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.886658 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:36.905784 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0318 10:12:45.841862 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-18 10:12:45.841847817 +0000 UTC m=+9.150369248 I0318 10:12:46.559923 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-18 10:12:46.559901833 +0000 UTC m=+9.868423274 I0318 10:12:46.560016 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:12:46.560127 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-18 10:12:46.56011549 +0000 UTC m=+9.868636931 E0318 10:12:46.576056 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0318 10:12:46.576185 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-18 10:12:46.576171981 +0000 UTC m=+9.884693392 E0318 10:12:46.576227 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0318 10:12:46.578826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:12:46.578929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:12:46.578955 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-18 10:12:46.578949061 +0000 UTC m=+9.887470462 E0318 10:12:46.586751 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0318 10:12:46.586918 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0318 10:12:46.586982 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0318 10:12:46.587112 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0318 10:12:46.614069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:12:46.617224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g7td8" condition "Approved" to 2026-03-18 10:12:46.617208551 +0000 UTC m=+9.925729962 I0318 10:12:46.631016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g7td8" condition "Ready" to 2026-03-18 10:12:46.631000677 +0000 UTC m=+9.939522088 I0318 10:12:46.657691 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:12:46.657669242 +0000 UTC m=+9.966190653 I0318 10:12:46.675999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:12:51.588003 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:12:51.587985548 +0000 UTC m=+14.896506989 I0318 10:13:14.089749 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-18 10:13:14.08973341 +0000 UTC m=+37.398254811 I0318 10:13:14.089833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:13:14.090077 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-18 10:13:14.09004772 +0000 UTC m=+37.398569131 I0318 10:13:14.104111 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-18 10:13:14.104096464 +0000 UTC m=+37.412617885 I0318 10:13:14.112186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:13:14.112259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:13:14.112291 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-18 10:13:14.112283423 +0000 UTC m=+37.420804844 I0318 10:13:14.366751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z6zbf" condition "Approved" to 2026-03-18 10:13:14.366734015 +0000 UTC m=+37.675255496 I0318 10:13:14.396663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-z6zbf" condition "Ready" to 2026-03-18 10:13:14.39664832 +0000 UTC m=+37.705169741 I0318 10:13:14.426681 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:13:14.426663249 +0000 UTC m=+37.735184690 I0318 10:13:14.448449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:13:14.449101 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:13:14.449088238 +0000 UTC m=+37.757609689 I0318 10:13:14.464029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:13:14.471874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:13:14.472147 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:13:14.472139496 +0000 UTC m=+37.780660907 I0318 10:15:13.415420 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-18 10:15:13.415371752 +0000 UTC m=+156.723893183 I0318 10:15:13.415469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:15:13.415558 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-18 10:15:13.415546558 +0000 UTC m=+156.724067999 E0318 10:15:13.430066 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0318 10:15:13.430218 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-18 10:15:13.430209046 +0000 UTC m=+156.738730457 I0318 10:15:13.430268 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0318 10:15:13.433053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:15:13.433127 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-18 10:15:13.433117867 +0000 UTC m=+156.741639278 E0318 10:15:13.441640 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0318 10:15:13.442011 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0318 10:15:13.442047 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0318 10:15:13.442073 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0318 10:15:13.447094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:15:13.447113 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-18 10:15:13.447107714 +0000 UTC m=+156.755629115 I0318 10:15:13.447265 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-18 10:15:13.447247309 +0000 UTC m=+156.755768730 I0318 10:15:13.463380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:15:13.463453 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-18 10:15:13.463444555 +0000 UTC m=+156.771965966 I0318 10:15:13.567344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:15:13.618277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ktjgk" condition "Approved" to 2026-03-18 10:15:13.618265417 +0000 UTC m=+156.926786818 I0318 10:15:13.654478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ktjgk" condition "Ready" to 2026-03-18 10:15:13.654458888 +0000 UTC m=+156.962980329 I0318 10:15:13.679912 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:15:13.679896064 +0000 UTC m=+156.988417475 I0318 10:15:13.696935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:15:13.697215 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:15:13.697208595 +0000 UTC m=+157.005730006 I0318 10:15:13.717862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:15:13.718471 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:15:13.71846151 +0000 UTC m=+157.026982941 I0318 10:15:13.831802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:15:13.863687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sfdxc" condition "Approved" to 2026-03-18 10:15:13.86367597 +0000 UTC m=+157.172197401 I0318 10:15:13.880729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sfdxc" condition "Ready" to 2026-03-18 10:15:13.880714353 +0000 UTC m=+157.189235764 I0318 10:15:18.442261 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:15:18.442245819 +0000 UTC m=+161.750767260 I0318 10:15:18.458251 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-sfdxc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:15:18.458240309 +0000 UTC m=+161.766761720 I0318 10:15:18.484837 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:15:18.48482727 +0000 UTC m=+161.793348681 I0318 10:15:18.503977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:17:48.935063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-62.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:17:48.935130 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Issuing" to 2026-03-18 10:17:48.935097207 +0000 UTC m=+312.243618638 I0318 10:17:48.935216 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Ready" to 2026-03-18 10:17:48.93519832 +0000 UTC m=+312.243719731 I0318 10:17:48.953194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:17:48.953273 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Ready" to 2026-03-18 10:17:48.953264675 +0000 UTC m=+312.261786086 I0318 10:17:49.113433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:17:49.147231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-62.nip.io-tls-v9fvn" condition "Approved" to 2026-03-18 10:17:49.147214049 +0000 UTC m=+312.455735480 I0318 10:17:49.170441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-62.nip.io-tls-v9fvn" condition "Ready" to 2026-03-18 10:17:49.170429138 +0000 UTC m=+312.478950539 I0318 10:17:49.195109 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:17:49.195094332 +0000 UTC m=+312.503615773 I0318 10:17:49.221199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:17:49.221569 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:17:49.221560083 +0000 UTC m=+312.530081494 I0318 10:17:49.226947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:17:49.237931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:17:49.238515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-62.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-62.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:17:49.238916 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-62.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:17:49.238905304 +0000 UTC m=+312.547426735 I0318 10:18:58.090342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:18:58.090409 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-18 10:18:58.090376343 +0000 UTC m=+381.398897754 I0318 10:18:58.090454 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-18 10:18:58.090436754 +0000 UTC m=+381.398958165 E0318 10:18:58.100784 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0318 10:18:58.100839 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-18 10:18:58.100829246 +0000 UTC m=+381.409350677 E0318 10:18:58.100969 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0318 10:18:58.106652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:18:58.106710 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:18:58.106728 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-18 10:18:58.106724394 +0000 UTC m=+381.415245805 E0318 10:18:58.109022 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0318 10:18:58.109146 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0318 10:18:58.109253 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0318 10:18:58.109312 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0318 10:18:58.143145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:18:58.144325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7v9lc" condition "Approved" to 2026-03-18 10:18:58.144313113 +0000 UTC m=+381.452834544 I0318 10:18:58.154983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7v9lc" condition "Ready" to 2026-03-18 10:18:58.154971463 +0000 UTC m=+381.463492874 I0318 10:18:58.176533 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:18:58.17652479 +0000 UTC m=+381.485046201 I0318 10:18:58.192876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:18:58.193108 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:18:58.193102719 +0000 UTC m=+381.501624130 I0318 10:18:58.196226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:18:58.204369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:18:58.204617 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:18:58.204609296 +0000 UTC m=+381.513130707 I0318 10:19:03.109561 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:03.109546921 +0000 UTC m=+386.418068352 I0318 10:19:39.070070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:19:39.070145 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-18 10:19:39.070124858 +0000 UTC m=+422.378646269 I0318 10:19:39.070538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:19:39.070595 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-18 10:19:39.070589233 +0000 UTC m=+422.379110634 I0318 10:19:39.070827 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-18 10:19:39.070822001 +0000 UTC m=+422.379343412 I0318 10:19:39.070954 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-18 10:19:39.070950235 +0000 UTC m=+422.379471636 I0318 10:19:39.072862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:19:39.072921 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-18 10:19:39.072914827 +0000 UTC m=+422.381436218 I0318 10:19:39.073210 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-18 10:19:39.073203697 +0000 UTC m=+422.381725118 I0318 10:19:39.133242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.133316 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-18 10:19:39.133311008 +0000 UTC m=+422.441832399 I0318 10:19:39.140862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.140938 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-18 10:19:39.140932682 +0000 UTC m=+422.449454083 I0318 10:19:39.142796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.143102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:19:39.143137 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-18 10:19:39.143131143 +0000 UTC m=+422.451652534 I0318 10:19:39.265774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.304191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xhbvt" condition "Approved" to 2026-03-18 10:19:39.304177391 +0000 UTC m=+422.612698802 I0318 10:19:39.330637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xhbvt" condition "Ready" to 2026-03-18 10:19:39.330622717 +0000 UTC m=+422.639144148 I0318 10:19:39.348238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k545p" condition "Approved" to 2026-03-18 10:19:39.348210559 +0000 UTC m=+422.656732000 I0318 10:19:39.382177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k545p" condition "Ready" to 2026-03-18 10:19:39.382159845 +0000 UTC m=+422.690681256 I0318 10:19:39.385869 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:39.385853233 +0000 UTC m=+422.694374644 I0318 10:19:39.406322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.406669 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:39.406662748 +0000 UTC m=+422.715184159 I0318 10:19:39.414817 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:39.414807598 +0000 UTC m=+422.723328999 I0318 10:19:39.417490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.425841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.426202 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:39.426190982 +0000 UTC m=+422.734712393 I0318 10:19:39.513089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.513453 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:39.513446022 +0000 UTC m=+422.821967433 I0318 10:19:39.572938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.911854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:39.962135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:40.016818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:40.280456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9npvr" condition "Approved" to 2026-03-18 10:19:40.280432973 +0000 UTC m=+423.588954424 I0318 10:19:40.473797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9npvr" condition "Ready" to 2026-03-18 10:19:40.473784385 +0000 UTC m=+423.782305796 I0318 10:19:40.763267 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:40.76325464 +0000 UTC m=+424.071776051 I0318 10:19:40.862273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:40.862681 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:40.862671499 +0000 UTC m=+424.171192920 I0318 10:19:41.064145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:47.434281 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" condition "Ready" to 2026-03-18 10:19:47.434262994 +0000 UTC m=+430.742784425 I0318 10:19:47.434633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:19:47.434796 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" condition "Issuing" to 2026-03-18 10:19:47.434782271 +0000 UTC m=+430.743303712 I0318 10:19:47.450847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:47.450950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:19:47.450977 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" condition "Issuing" to 2026-03-18 10:19:47.450970878 +0000 UTC m=+430.759492289 I0318 10:19:47.674587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:47.679023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ncgfz-r2cgp" condition "Approved" to 2026-03-18 10:19:47.678989979 +0000 UTC m=+430.987511380 I0318 10:19:47.695906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ncgfz-r2cgp" condition "Ready" to 2026-03-18 10:19:47.695891359 +0000 UTC m=+431.004412790 I0318 10:19:47.729167 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:47.729152803 +0000 UTC m=+431.037674214 I0318 10:19:47.747387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:47.747732 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:47.747722416 +0000 UTC m=+431.056243827 I0318 10:19:47.763991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:19:47.764443 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ncgfz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:19:47.76442985 +0000 UTC m=+431.072951251 I0318 10:20:10.393209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:20:10.393254 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-18 10:20:10.393243327 +0000 UTC m=+453.701764768 I0318 10:20:10.393360 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-18 10:20:10.39333509 +0000 UTC m=+453.701856531 I0318 10:20:10.521998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:20:10.522123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:20:10.522154 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-18 10:20:10.522145478 +0000 UTC m=+453.830666919 I0318 10:20:10.788484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:20:10.801409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wh7rw" condition "Approved" to 2026-03-18 10:20:10.801396046 +0000 UTC m=+454.109917457 I0318 10:20:10.824451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wh7rw" condition "Ready" to 2026-03-18 10:20:10.824439493 +0000 UTC m=+454.132960904 I0318 10:20:10.858864 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:20:10.858851733 +0000 UTC m=+454.167373144 I0318 10:20:10.878802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:20:10.880636 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:20:10.880623539 +0000 UTC m=+454.189144940 I0318 10:20:10.890957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:20:10.901132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:20:10.901463 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:20:10.901456385 +0000 UTC m=+454.209977786 I0318 10:20:10.905981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:23:43.233067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:23:43.233123 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-18 10:23:43.23310196 +0000 UTC m=+666.541623391 I0318 10:23:43.233436 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-18 10:23:43.23342445 +0000 UTC m=+666.541945881 I0318 10:23:43.251467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:23:43.251544 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-18 10:23:43.251536075 +0000 UTC m=+666.560057486 I0318 10:23:43.446299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:23:43.481490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vtpn7" condition "Approved" to 2026-03-18 10:23:43.48147953 +0000 UTC m=+666.790000951 I0318 10:23:43.500536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vtpn7" condition "Ready" to 2026-03-18 10:23:43.500523575 +0000 UTC m=+666.809045016 I0318 10:23:43.532392 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:23:43.532378507 +0000 UTC m=+666.840899918 I0318 10:23:43.561851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:23:43.616622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:26:06.452853 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-18 10:26:06.452795871 +0000 UTC m=+809.761317312 I0318 10:26:06.452881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:26:06.453097 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-18 10:26:06.45308241 +0000 UTC m=+809.761603861 I0318 10:26:06.471407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:26:06.471476 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-18 10:26:06.471468433 +0000 UTC m=+809.779989844 I0318 10:26:06.691568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:26:06.722591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4qglb" condition "Approved" to 2026-03-18 10:26:06.722575171 +0000 UTC m=+810.031096582 I0318 10:26:06.740087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4qglb" condition "Ready" to 2026-03-18 10:26:06.740078836 +0000 UTC m=+810.048600237 I0318 10:26:06.762517 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:26:06.762506797 +0000 UTC m=+810.071028208 I0318 10:26:06.787262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:27:18.353994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:27:18.354023 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-18 10:27:18.354016163 +0000 UTC m=+881.662537564 I0318 10:27:18.354278 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-18 10:27:18.354273481 +0000 UTC m=+881.662794882 I0318 10:27:18.367293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:27:18.367351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:27:18.367365 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-18 10:27:18.367360505 +0000 UTC m=+881.675881906 I0318 10:27:18.997933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:27:19.007551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-57vfq" condition "Approved" to 2026-03-18 10:27:19.007542085 +0000 UTC m=+882.316063486 I0318 10:27:19.032188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-57vfq" condition "Ready" to 2026-03-18 10:27:19.032164574 +0000 UTC m=+882.340686015 I0318 10:27:19.062511 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:27:19.062498833 +0000 UTC m=+882.371020244 I0318 10:27:19.085370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:30:24.961122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0318 10:30:24.961145 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-18 10:30:24.961119306 +0000 UTC m=+1068.269640727 I0318 10:30:24.961192 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-18 10:30:24.961185888 +0000 UTC m=+1068.269707289 I0318 10:30:24.979994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:30:24.980205 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-18 10:30:24.980189999 +0000 UTC m=+1068.288711410 I0318 10:30:25.213777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:30:25.250197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-jsrkf" condition "Approved" to 2026-03-18 10:30:25.250174707 +0000 UTC m=+1068.558696138 I0318 10:30:25.275710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-jsrkf" condition "Ready" to 2026-03-18 10:30:25.275695695 +0000 UTC m=+1068.584217116 I0318 10:30:25.303248 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:30:25.303236816 +0000 UTC m=+1068.611758227 I0318 10:30:25.329203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:30:25.329666 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:30:25.329658982 +0000 UTC m=+1068.638180393 I0318 10:30:25.336901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:30:25.344279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0318 10:30:25.344665 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-18 10:30:25.344654706 +0000 UTC m=+1068.653176137