I0401 23:30:01.264840 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0401 23:30:01.265040 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0401 23:30:01.265154 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0401 23:30:01.268899 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0401 23:30:01.269485 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0401 23:30:01.269754 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0401 23:30:01.269771 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0401 23:30:01.272595 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0401 23:30:01.286734 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0401 23:30:01.293370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0401 23:30:01.296578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0401 23:30:01.299328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0401 23:30:01.302029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0401 23:30:01.304628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0401 23:30:01.310655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0401 23:30:01.313622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0401 23:30:01.316118 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0401 23:30:01.316147 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0401 23:30:01.316188 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0401 23:30:01.318995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0401 23:30:01.321442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0401 23:30:01.324136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0401 23:30:01.326496 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0401 23:30:01.326639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0401 23:30:01.328304 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0401 23:30:01.328366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0401 23:30:01.333740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0401 23:30:01.336593 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0401 23:30:01.339071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0401 23:30:01.341606 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0401 23:30:01.343464 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0401 23:30:01.343500 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0401 23:30:01.343498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0401 23:30:01.347803 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.348159 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.348514 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.348619 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.348773 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.348915 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.348949 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.349132 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.349504 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:01.439097 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:12.909507 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-01 23:30:12.90949434 +0000 UTC m=+11.682311874 I0401 23:30:13.598623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:13.598756 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-01 23:30:13.598748156 +0000 UTC m=+12.371565680 I0401 23:30:13.598790 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 23:30:13.598772337 +0000 UTC m=+12.371589891 E0401 23:30:13.613621 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:30:13.613730 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-01 23:30:13.613721857 +0000 UTC m=+12.386539381 E0401 23:30:13.613774 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:30:13.618385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:13.618956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:13.619019 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-01 23:30:13.619013272 +0000 UTC m=+12.391830796 E0401 23:30:13.624989 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0401 23:30:13.625093 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:30:13.625123 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:30:13.625157 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0401 23:30:13.650798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:13.659686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vr2df" condition "Approved" to 2026-04-01 23:30:13.659670947 +0000 UTC m=+12.432488501 I0401 23:30:13.671745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vr2df" condition "Ready" to 2026-04-01 23:30:13.671735018 +0000 UTC m=+12.444552562 I0401 23:30:13.695602 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:13.695589043 +0000 UTC m=+12.468406577 I0401 23:30:13.716390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:13.758370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:18.626105 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:18.626089095 +0000 UTC m=+17.398906659 I0401 23:30:38.722822 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-01 23:30:38.722767746 +0000 UTC m=+37.495585300 I0401 23:30:38.722851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:38.723548 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-01 23:30:38.723537667 +0000 UTC m=+37.496355221 I0401 23:30:38.756957 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-01 23:30:38.756936448 +0000 UTC m=+37.529754012 I0401 23:30:38.761522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:38.761597 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-01 23:30:38.761591215 +0000 UTC m=+37.534408749 I0401 23:30:38.925791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:38.961015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5p7vb" condition "Approved" to 2026-04-01 23:30:38.960998632 +0000 UTC m=+37.733816176 I0401 23:30:38.997483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5p7vb" condition "Ready" to 2026-04-01 23:30:38.997472187 +0000 UTC m=+37.770289721 I0401 23:30:39.027287 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:39.027263768 +0000 UTC m=+37.800081342 I0401 23:30:39.054204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:23.535166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:32:23.535305 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-01 23:32:23.535296982 +0000 UTC m=+142.308114516 I0401 23:32:23.535137 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-01 23:32:23.534332716 +0000 UTC m=+142.307150270 E0401 23:32:23.549730 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:32:23.549981 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-01 23:32:23.549969486 +0000 UTC m=+142.322787020 I0401 23:32:23.550042 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:32:23.557253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:23.557391 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-01 23:32:23.55737699 +0000 UTC m=+142.330194524 E0401 23:32:23.562181 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0401 23:32:23.562274 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:32:23.562299 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0401 23:32:23.562334 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0401 23:32:23.565995 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-01 23:32:23.565988117 +0000 UTC m=+142.338805641 I0401 23:32:23.566040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:32:23.566068 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-01 23:32:23.566058669 +0000 UTC m=+142.338876203 I0401 23:32:23.584791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:23.584983 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-01 23:32:23.584971979 +0000 UTC m=+142.357789523 I0401 23:32:23.668207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:23.695335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-gcdxl" condition "Approved" to 2026-04-01 23:32:23.695317106 +0000 UTC m=+142.468134660 I0401 23:32:23.774632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-gcdxl" condition "Ready" to 2026-04-01 23:32:23.774619538 +0000 UTC m=+142.547437062 I0401 23:32:23.781220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:23.808344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-8lm8t" condition "Approved" to 2026-04-01 23:32:23.808323395 +0000 UTC m=+142.581140929 I0401 23:32:23.839640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-8lm8t" condition "Ready" to 2026-04-01 23:32:23.839613897 +0000 UTC m=+142.612431461 I0401 23:32:23.870537 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:23.870520838 +0000 UTC m=+142.643338392 I0401 23:32:23.894160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:23.953145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:28.562620 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:28.562608703 +0000 UTC m=+147.335426237 I0401 23:32:28.580198 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-gcdxl" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:28.580182427 +0000 UTC m=+147.352999991 I0401 23:32:28.609930 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:28.609908764 +0000 UTC m=+147.382726318 I0401 23:32:28.633973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:28.634788 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:28.634776188 +0000 UTC m=+147.407593752 I0401 23:32:28.648706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:28.654913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:28.655379 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:28.655369686 +0000 UTC m=+147.428187240 I0401 23:35:01.960226 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-04-01 23:35:01.960110081 +0000 UTC m=+300.732927605 I0401 23:35:01.960402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:01.960526 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-04-01 23:35:01.960513992 +0000 UTC m=+300.733331546 I0401 23:35:01.986091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:01.986180 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-04-01 23:35:01.986170948 +0000 UTC m=+300.758988482 I0401 23:35:02.319309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:02.351092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-lbqls" condition "Approved" to 2026-04-01 23:35:02.351072582 +0000 UTC m=+301.123890136 I0401 23:35:02.378646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-lbqls" condition "Ready" to 2026-04-01 23:35:02.37863537 +0000 UTC m=+301.151452904 I0401 23:35:02.404842 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:02.404825259 +0000 UTC m=+301.177642793 I0401 23:35:02.433153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:02.433684 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:02.433673621 +0000 UTC m=+301.206491185 I0401 23:35:02.439612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:02.451286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:02.451661 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:02.451650426 +0000 UTC m=+301.224467960 I0401 23:36:12.689326 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-01 23:36:12.688748452 +0000 UTC m=+371.461566006 I0401 23:36:12.689335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:12.689548 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-01 23:36:12.689507943 +0000 UTC m=+371.462325477 I0401 23:36:12.704724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:12.704849 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-01 23:36:12.704839515 +0000 UTC m=+371.477657049 E0401 23:36:12.707623 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:36:12.707670 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-01 23:36:12.707660313 +0000 UTC m=+371.480477877 E0401 23:36:12.707809 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:36:12.716561 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0401 23:36:12.716661 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:36:12.716694 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:36:12.716829 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0401 23:36:12.723376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:12.739442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fq9nv" condition "Approved" to 2026-04-01 23:36:12.739433556 +0000 UTC m=+371.512251090 I0401 23:36:12.758420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fq9nv" condition "Ready" to 2026-04-01 23:36:12.758411539 +0000 UTC m=+371.531229073 I0401 23:36:12.778666 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:12.778653975 +0000 UTC m=+371.551471509 I0401 23:36:12.799007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:12.799646 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:12.799631213 +0000 UTC m=+371.572448777 I0401 23:36:12.801315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:12.825595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:12.825843 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:12.825835043 +0000 UTC m=+371.598652567 I0401 23:36:17.718053 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:17.718038928 +0000 UTC m=+376.490856492 I0401 23:36:56.868234 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-01 23:36:56.86822122 +0000 UTC m=+415.641038754 I0401 23:36:56.868569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:56.868594 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 23:36:56.86859044 +0000 UTC m=+415.641407974 I0401 23:36:56.881068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:56.881106 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 23:36:56.881099534 +0000 UTC m=+415.653917058 I0401 23:36:56.881598 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-01 23:36:56.881586678 +0000 UTC m=+415.654404202 I0401 23:36:56.884378 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-01 23:36:56.884364594 +0000 UTC m=+415.657182118 I0401 23:36:56.885184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:56.885202 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-01 23:36:56.885198808 +0000 UTC m=+415.658016332 I0401 23:36:56.949596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:56.949848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:56.949897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 23:36:56.949873867 +0000 UTC m=+415.722691391 I0401 23:36:56.959423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:56.959507 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-01 23:36:56.959501172 +0000 UTC m=+415.732318696 I0401 23:36:56.960350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:56.960462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:56.960500 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 23:36:56.96049203 +0000 UTC m=+415.733309564 I0401 23:36:57.131835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vt9sm" condition "Approved" to 2026-04-01 23:36:57.131804334 +0000 UTC m=+415.904621878 I0401 23:36:57.150707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:57.156650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dw5kb" condition "Approved" to 2026-04-01 23:36:57.156641288 +0000 UTC m=+415.929458812 I0401 23:36:57.170146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vt9sm" condition "Ready" to 2026-04-01 23:36:57.170131279 +0000 UTC m=+415.942948803 I0401 23:36:57.179502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dw5kb" condition "Ready" to 2026-04-01 23:36:57.179486177 +0000 UTC m=+415.952303711 I0401 23:36:57.240655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:57.240697 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 23:36:57.240688021 +0000 UTC m=+416.013505555 I0401 23:36:57.241263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:57.241311 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 23:36:57.241302358 +0000 UTC m=+416.014119882 I0401 23:36:57.244806 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:57.244800114 +0000 UTC m=+416.017617648 I0401 23:36:57.244904 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:57.244892546 +0000 UTC m=+416.017710070 I0401 23:36:57.251100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:57.357434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:57.357766 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:57.357757222 +0000 UTC m=+416.130574756 I0401 23:36:57.404752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:57.405379 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:57.405365013 +0000 UTC m=+416.178182567 I0401 23:36:57.502801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:57.549423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:57.908060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-852zb" condition "Approved" to 2026-04-01 23:36:57.908025807 +0000 UTC m=+416.680843381 E0401 23:36:58.051033 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-k48g8\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0401 23:36:58.106334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9kcjp" condition "Approved" to 2026-04-01 23:36:58.106315174 +0000 UTC m=+416.879132708 E0401 23:36:58.150542 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-8nb96\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0401 23:36:58.205369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-klszq" condition "Approved" to 2026-04-01 23:36:58.20535136 +0000 UTC m=+416.978168924 I0401 23:36:58.562006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-852zb" condition "Ready" to 2026-04-01 23:36:58.561992555 +0000 UTC m=+417.334810099 I0401 23:36:58.657167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9kcjp" condition "Ready" to 2026-04-01 23:36:58.657153804 +0000 UTC m=+417.429971338 I0401 23:36:58.710798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-klszq" condition "Ready" to 2026-04-01 23:36:58.71078447 +0000 UTC m=+417.483602004 I0401 23:36:59.552394 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:59.552375942 +0000 UTC m=+418.325193506 I0401 23:36:59.854787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:59.855598 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:59.855583566 +0000 UTC m=+418.628401140 I0401 23:37:00.002354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:00.100545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:00.752146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:00.801095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:00.851842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:00.901597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:00.951998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:04.185594 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" condition "Ready" to 2026-04-01 23:37:04.185548164 +0000 UTC m=+422.958365728 I0401 23:37:04.186126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:37:04.186187 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" condition "Issuing" to 2026-04-01 23:37:04.186175951 +0000 UTC m=+422.958993485 I0401 23:37:04.201965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:04.202051 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" condition "Ready" to 2026-04-01 23:37:04.202042368 +0000 UTC m=+422.974859882 I0401 23:37:04.424472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:04.459197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jfr8w-m9dsl" condition "Approved" to 2026-04-01 23:37:04.459173844 +0000 UTC m=+423.231991378 I0401 23:37:04.479768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jfr8w-m9dsl" condition "Ready" to 2026-04-01 23:37:04.479758421 +0000 UTC m=+423.252575945 I0401 23:37:04.508951 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:37:04.508930163 +0000 UTC m=+423.281747717 I0401 23:37:04.528894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:04.529324 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:37:04.529314164 +0000 UTC m=+423.302131728 I0401 23:37:04.578689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jfr8w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:34.381764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:37:34.381800 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-01 23:37:34.381792669 +0000 UTC m=+453.154610193 I0401 23:37:34.382264 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-01 23:37:34.382257842 +0000 UTC m=+453.155075376 I0401 23:37:34.397409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:34.397490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:37:34.397511 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-01 23:37:34.397504291 +0000 UTC m=+453.170321825 I0401 23:37:35.031224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vvfn5" condition "Approved" to 2026-04-01 23:37:35.030095501 +0000 UTC m=+453.802913055 I0401 23:37:35.054898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vvfn5" condition "Ready" to 2026-04-01 23:37:35.054880484 +0000 UTC m=+453.827698018 I0401 23:37:35.085987 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:37:35.085968249 +0000 UTC m=+453.858785783 I0401 23:37:35.110805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:35.111184 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:37:35.111177653 +0000 UTC m=+453.883995177 I0401 23:37:35.115358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:35.132262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:45.509427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:40:45.509541 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 23:40:45.509518578 +0000 UTC m=+644.282336112 I0401 23:40:45.509580 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-01 23:40:45.509434246 +0000 UTC m=+644.282251820 I0401 23:40:45.529028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:45.529235 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:40:45.529293 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 23:40:45.529287422 +0000 UTC m=+644.302104946 I0401 23:40:45.998951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:46.004810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ljm46" condition "Approved" to 2026-04-01 23:40:46.004796528 +0000 UTC m=+644.777614062 I0401 23:40:46.023913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ljm46" condition "Ready" to 2026-04-01 23:40:46.023899653 +0000 UTC m=+644.796717177 I0401 23:40:46.056019 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:40:46.055994708 +0000 UTC m=+644.828812272 I0401 23:40:46.081075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:46.081449 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:40:46.081442438 +0000 UTC m=+644.854259972 I0401 23:40:46.099337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:43:13.916562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:43:13.916603 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-01 23:43:13.916558025 +0000 UTC m=+792.689375559 I0401 23:43:13.916645 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-01 23:43:13.916635477 +0000 UTC m=+792.689453031 I0401 23:43:13.935582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:43:13.935664 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-01 23:43:13.935657211 +0000 UTC m=+792.708474735 I0401 23:43:14.164058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:43:14.196432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qmb7m" condition "Approved" to 2026-04-01 23:43:14.196414675 +0000 UTC m=+792.969232249 I0401 23:43:14.218638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qmb7m" condition "Ready" to 2026-04-01 23:43:14.218627376 +0000 UTC m=+792.991444900 I0401 23:43:14.256382 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:43:14.256368024 +0000 UTC m=+793.029185548 I0401 23:43:14.280356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:44:20.410818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:44:20.410878 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-01 23:44:20.410855422 +0000 UTC m=+859.183672986 I0401 23:44:20.410915 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-01 23:44:20.410905343 +0000 UTC m=+859.183722907 I0401 23:44:20.439718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:44:20.439879 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-01 23:44:20.439868111 +0000 UTC m=+859.212685635 I0401 23:44:20.637330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:44:20.673508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zdc9t" condition "Approved" to 2026-04-01 23:44:20.673487766 +0000 UTC m=+859.446305330 I0401 23:44:20.694680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zdc9t" condition "Ready" to 2026-04-01 23:44:20.694669709 +0000 UTC m=+859.467487243 I0401 23:44:20.719654 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:44:20.719644426 +0000 UTC m=+859.492461960 I0401 23:44:20.737809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:47:25.450277 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-01 23:47:25.450256707 +0000 UTC m=+1044.223074241 I0401 23:47:25.450452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:47:25.450519 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-01 23:47:25.450512554 +0000 UTC m=+1044.223330088 I0401 23:47:25.467840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:47:25.468034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:47:25.468135 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-01 23:47:25.468124028 +0000 UTC m=+1044.240941592 I0401 23:47:25.640964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-tz7h7" condition "Approved" to 2026-04-01 23:47:25.640941559 +0000 UTC m=+1044.413759113 I0401 23:47:25.665164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-tz7h7" condition "Ready" to 2026-04-01 23:47:25.665147164 +0000 UTC m=+1044.437964698 I0401 23:47:25.702295 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:47:25.702275955 +0000 UTC m=+1044.475093489 I0401 23:47:25.727014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:47:25.727518 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:47:25.727508298 +0000 UTC m=+1044.500325842 I0401 23:47:25.753181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:47:25.753526 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:47:25.753516443 +0000 UTC m=+1044.526333987