I0326 01:57:42.597593 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0326 01:57:42.597726 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0326 01:57:42.597896 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0326 01:57:42.602661 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0326 01:57:42.603163 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0326 01:57:42.603244 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0326 01:57:42.603262 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0326 01:57:42.606979 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0326 01:57:42.624669 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0326 01:57:42.631864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0326 01:57:42.635872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0326 01:57:42.639468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0326 01:57:42.642331 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0326 01:57:42.642377 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0326 01:57:42.645017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0326 01:57:42.647907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0326 01:57:42.653101 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0326 01:57:42.653137 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0326 01:57:42.653148 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0326 01:57:42.653694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0326 01:57:42.656115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0326 01:57:42.658466 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0326 01:57:42.660555 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0326 01:57:42.660615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0326 01:57:42.662348 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0326 01:57:42.664020 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0326 01:57:42.664144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0326 01:57:42.665875 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0326 01:57:42.667941 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0326 01:57:42.672985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0326 01:57:42.676605 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0326 01:57:42.679128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0326 01:57:42.681719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0326 01:57:42.683664 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.683722 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.685975 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.686261 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.701922 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.718781 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.733546 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.743936 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.767190 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:42.768313 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:57:55.399430 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-26 01:57:55.399403678 +0000 UTC m=+12.835962239 I0326 01:57:56.139422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 01:57:56.139468 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-26 01:57:56.139457662 +0000 UTC m=+13.576016233 I0326 01:57:56.139639 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-26 01:57:56.139620606 +0000 UTC m=+13.576179187 E0326 01:57:56.155927 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0326 01:57:56.155979 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-26 01:57:56.155972764 +0000 UTC m=+13.592531295 E0326 01:57:56.156131 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0326 01:57:56.158001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:57:56.158050 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-26 01:57:56.158044159 +0000 UTC m=+13.594602700 E0326 01:57:56.165959 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0326 01:57:56.166408 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 01:57:56.166447 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 01:57:56.166473 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0326 01:57:56.178126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:57:56.210462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f5cvx" condition "Approved" to 2026-03-26 01:57:56.210449057 +0000 UTC m=+13.647007598 I0326 01:57:56.221038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f5cvx" condition "Ready" to 2026-03-26 01:57:56.221027619 +0000 UTC m=+13.657586160 I0326 01:57:56.240409 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:57:56.240397144 +0000 UTC m=+13.676955685 I0326 01:57:56.261170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:57:56.261638 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:57:56.261630098 +0000 UTC m=+13.698188639 I0326 01:57:56.277206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:58:01.167348 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:58:01.167334164 +0000 UTC m=+18.603892735 I0326 01:58:27.217747 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-26 01:58:27.217727662 +0000 UTC m=+44.654286233 I0326 01:58:27.217785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 01:58:27.217832 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-26 01:58:27.217816064 +0000 UTC m=+44.654374605 I0326 01:58:27.230192 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-26 01:58:27.230181705 +0000 UTC m=+44.666740246 I0326 01:58:27.239835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:58:27.239902 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-26 01:58:27.239895498 +0000 UTC m=+44.676454039 I0326 01:58:27.399955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:58:27.433940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g54jf" condition "Approved" to 2026-03-26 01:58:27.433930529 +0000 UTC m=+44.870489060 I0326 01:58:27.467305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g54jf" condition "Ready" to 2026-03-26 01:58:27.46729271 +0000 UTC m=+44.903851241 I0326 01:58:27.503314 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:58:27.503297979 +0000 UTC m=+44.939856550 I0326 01:58:27.523680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:58:27.524083 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:58:27.524072864 +0000 UTC m=+44.960631405 I0326 01:58:27.548598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:58:27.548975 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:58:27.54896594 +0000 UTC m=+44.985524471 I0326 02:00:27.541153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:00:27.541247 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-26 02:00:27.541213309 +0000 UTC m=+164.977771850 I0326 02:00:27.541655 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-26 02:00:27.541642929 +0000 UTC m=+164.978201500 I0326 02:00:27.622926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:00:27.623046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:00:27.623093 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-26 02:00:27.623082362 +0000 UTC m=+165.059640923 E0326 02:00:27.630668 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0326 02:00:27.630724 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-26 02:00:27.63071365 +0000 UTC m=+165.067272211 I0326 02:00:27.630791 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0326 02:00:27.646715 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0326 02:00:27.646973 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0326 02:00:27.647085 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0326 02:00:27.647132 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0326 02:00:27.655320 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-26 02:00:27.655310544 +0000 UTC m=+165.091869085 I0326 02:00:27.655537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:00:27.655589 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-26 02:00:27.65557825 +0000 UTC m=+165.092136821 I0326 02:00:27.672757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:00:27.672887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:00:27.672934 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-26 02:00:27.672922983 +0000 UTC m=+165.109481574 I0326 02:00:27.829169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:00:27.839493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-pmfxz" condition "Approved" to 2026-03-26 02:00:27.83947876 +0000 UTC m=+165.276037291 I0326 02:00:27.842158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pcttw" condition "Approved" to 2026-03-26 02:00:27.842135329 +0000 UTC m=+165.278693890 I0326 02:00:27.857575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-pmfxz" condition "Ready" to 2026-03-26 02:00:27.85755854 +0000 UTC m=+165.294117071 I0326 02:00:27.872888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pcttw" condition "Ready" to 2026-03-26 02:00:27.872870289 +0000 UTC m=+165.309428860 I0326 02:00:27.899539 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:00:27.899517039 +0000 UTC m=+165.336075610 I0326 02:00:27.916510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:00:27.917053 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:00:27.917043377 +0000 UTC m=+165.353601918 I0326 02:00:27.936495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:00:32.647250 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:00:32.647234747 +0000 UTC m=+170.083793308 I0326 02:00:32.674585 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-pmfxz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:00:32.674568763 +0000 UTC m=+170.111127324 I0326 02:00:32.708418 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:00:32.708401611 +0000 UTC m=+170.144960142 I0326 02:00:32.736681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:00:32.737075 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:00:32.737065816 +0000 UTC m=+170.173624357 I0326 02:00:32.756892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:00:32.757327 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:00:32.757316803 +0000 UTC m=+170.193875374 I0326 02:02:59.611563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-43.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:02:59.611626 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Issuing" to 2026-03-26 02:02:59.611601166 +0000 UTC m=+317.048159727 I0326 02:02:59.611626 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Ready" to 2026-03-26 02:02:59.611615276 +0000 UTC m=+317.048173837 I0326 02:02:59.629376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:02:59.629459 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-43.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:02:59.629487 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Issuing" to 2026-03-26 02:02:59.629479363 +0000 UTC m=+317.066037934 I0326 02:02:59.855322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:02:59.864435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-43.nip.io-tls-kn6dp" condition "Approved" to 2026-03-26 02:02:59.864415578 +0000 UTC m=+317.300974149 I0326 02:02:59.882316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-43.nip.io-tls-kn6dp" condition "Ready" to 2026-03-26 02:02:59.882301766 +0000 UTC m=+317.318860307 I0326 02:02:59.911763 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:02:59.911748451 +0000 UTC m=+317.348307022 I0326 02:02:59.939667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:10.193827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:10.193874 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-26 02:04:10.193862307 +0000 UTC m=+387.630420858 I0326 02:04:10.193874 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-26 02:04:10.193820307 +0000 UTC m=+387.630378858 E0326 02:04:10.206597 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0326 02:04:10.206644 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-26 02:04:10.206632149 +0000 UTC m=+387.643190700 E0326 02:04:10.206700 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0326 02:04:10.208025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:10.208100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:10.208120 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-26 02:04:10.208115521 +0000 UTC m=+387.644674062 E0326 02:04:10.214820 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0326 02:04:10.215015 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 02:04:10.215065 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 02:04:10.215113 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0326 02:04:10.249231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:10.249863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dw7ln" condition "Approved" to 2026-03-26 02:04:10.249840898 +0000 UTC m=+387.686399469 I0326 02:04:10.264366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dw7ln" condition "Ready" to 2026-03-26 02:04:10.264349487 +0000 UTC m=+387.700908048 I0326 02:04:10.293175 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:10.293148321 +0000 UTC m=+387.729706862 I0326 02:04:10.312364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:10.312624 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:10.31261555 +0000 UTC m=+387.749174091 I0326 02:04:10.324449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:10.324757 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:10.324747996 +0000 UTC m=+387.761306537 I0326 02:04:10.327825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:15.216250 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:15.216233358 +0000 UTC m=+392.652791919 I0326 02:04:54.454681 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-26 02:04:54.454636507 +0000 UTC m=+431.891195048 I0326 02:04:54.456105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:54.456142 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-26 02:04:54.456134661 +0000 UTC m=+431.892693192 I0326 02:04:54.456341 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-26 02:04:54.456329245 +0000 UTC m=+431.892887776 I0326 02:04:54.456400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:54.456793 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-26 02:04:54.456788865 +0000 UTC m=+431.893347396 I0326 02:04:54.459559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:54.459659 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-26 02:04:54.459654418 +0000 UTC m=+431.896212959 I0326 02:04:54.459764 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-26 02:04:54.45975964 +0000 UTC m=+431.896318161 I0326 02:04:54.499605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:54.499636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:54.499671 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-26 02:04:54.499664827 +0000 UTC m=+431.936223358 I0326 02:04:54.499703 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-26 02:04:54.499696248 +0000 UTC m=+431.936254779 I0326 02:04:54.502010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:54.502050 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:54.502101 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-26 02:04:54.502098051 +0000 UTC m=+431.938656572 I0326 02:04:54.600576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:54.653868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-scjf6" condition "Approved" to 2026-03-26 02:04:54.653852858 +0000 UTC m=+432.090411389 I0326 02:04:54.683459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-scjf6" condition "Ready" to 2026-03-26 02:04:54.67575376 +0000 UTC m=+432.112312301 I0326 02:04:54.687705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:54.700195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zclhm" condition "Approved" to 2026-03-26 02:04:54.700180588 +0000 UTC m=+432.136739129 I0326 02:04:54.724150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zclhm" condition "Ready" to 2026-03-26 02:04:54.724128774 +0000 UTC m=+432.160687335 I0326 02:04:54.758064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:54.758099 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-26 02:04:54.75809113 +0000 UTC m=+432.194649661 I0326 02:04:54.762288 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:54.762275113 +0000 UTC m=+432.198833654 I0326 02:04:54.762392 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:54.762386875 +0000 UTC m=+432.198945406 I0326 02:04:54.780190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:54.792507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:54.792730 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:54.792722523 +0000 UTC m=+432.229281054 I0326 02:04:54.845615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:55.193492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:55.246667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:55.296802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:55.499748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-86x2s" condition "Approved" to 2026-03-26 02:04:55.49971637 +0000 UTC m=+432.936274941 I0326 02:04:55.811422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-86x2s" condition "Ready" to 2026-03-26 02:04:55.811404025 +0000 UTC m=+433.247962596 I0326 02:04:56.050046 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:56.050031762 +0000 UTC m=+433.486590293 I0326 02:04:56.147350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:56.148057 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:56.148044248 +0000 UTC m=+433.584602809 I0326 02:04:56.393039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:56.445303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:00.462763 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" condition "Ready" to 2026-03-26 02:05:00.462742636 +0000 UTC m=+437.899301167 I0326 02:05:00.462840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:05:00.462867 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" condition "Issuing" to 2026-03-26 02:05:00.462860629 +0000 UTC m=+437.899419170 I0326 02:05:00.483963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:00.484094 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" condition "Ready" to 2026-03-26 02:05:00.484081955 +0000 UTC m=+437.920640526 I0326 02:05:00.591624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:00.626360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-d4nmh-62qc8" condition "Approved" to 2026-03-26 02:05:00.626340253 +0000 UTC m=+438.062898794 I0326 02:05:00.647675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-d4nmh-62qc8" condition "Ready" to 2026-03-26 02:05:00.647665873 +0000 UTC m=+438.084224404 I0326 02:05:00.684356 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:05:00.684334249 +0000 UTC m=+438.120892800 I0326 02:05:00.707108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:00.707522 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:05:00.707509899 +0000 UTC m=+438.144068430 I0326 02:05:00.732549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:00.732981 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:05:00.732967918 +0000 UTC m=+438.169526459 I0326 02:05:00.736230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d4nmh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:27.464097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:05:27.464120 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-26 02:05:27.464109995 +0000 UTC m=+464.900668536 I0326 02:05:27.464128 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-26 02:05:27.464122766 +0000 UTC m=+464.900681307 I0326 02:05:27.485246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:27.485375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:05:27.485413 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-26 02:05:27.485403707 +0000 UTC m=+464.921962248 I0326 02:05:27.685181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:27.690201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w7gg7" condition "Approved" to 2026-03-26 02:05:27.690183269 +0000 UTC m=+465.126741800 I0326 02:05:27.710411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-w7gg7" condition "Ready" to 2026-03-26 02:05:27.710396737 +0000 UTC m=+465.146955278 I0326 02:05:27.750248 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:05:27.750221898 +0000 UTC m=+465.186780449 I0326 02:05:27.769718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:08:49.762584 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:08:49.762641 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-26 02:08:49.76260621 +0000 UTC m=+667.199164751 I0326 02:08:49.762732 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-26 02:08:49.762710792 +0000 UTC m=+667.199269353 I0326 02:08:49.779384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:08:49.779443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:08:49.779458 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-26 02:08:49.779453052 +0000 UTC m=+667.216011583 I0326 02:08:50.178107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:08:50.183497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nlgwm" condition "Approved" to 2026-03-26 02:08:50.183485675 +0000 UTC m=+667.620044206 I0326 02:08:50.202864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nlgwm" condition "Ready" to 2026-03-26 02:08:50.202851423 +0000 UTC m=+667.639409964 I0326 02:08:50.227580 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:08:50.227570999 +0000 UTC m=+667.664129520 I0326 02:08:50.246656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:08:50.293271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:11:20.973115 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-26 02:11:20.973057355 +0000 UTC m=+818.409615916 I0326 02:11:20.973165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:11:20.973333 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-26 02:11:20.973320941 +0000 UTC m=+818.409879512 I0326 02:11:20.992132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:11:20.992228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:11:20.992257 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-26 02:11:20.992249519 +0000 UTC m=+818.428808050 I0326 02:11:21.194475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:11:21.205501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ndzzt" condition "Approved" to 2026-03-26 02:11:21.20549018 +0000 UTC m=+818.642048741 I0326 02:11:21.229219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ndzzt" condition "Ready" to 2026-03-26 02:11:21.229206053 +0000 UTC m=+818.665764594 I0326 02:11:21.257175 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:11:21.25715607 +0000 UTC m=+818.693714641 I0326 02:11:21.283061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:11:21.283332 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:11:21.283328488 +0000 UTC m=+818.719887019 I0326 02:11:21.285356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:11:21.298997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:11:21.299261 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:11:21.2992533 +0000 UTC m=+818.735811831 I0326 02:12:28.226006 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-26 02:12:28.225992631 +0000 UTC m=+885.662551152 I0326 02:12:28.226167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:12:28.226227 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-26 02:12:28.226220516 +0000 UTC m=+885.662779057 I0326 02:12:28.243004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:12:28.243060 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-26 02:12:28.243053977 +0000 UTC m=+885.679612518 I0326 02:12:28.398048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:12:28.434161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ljvz5" condition "Approved" to 2026-03-26 02:12:28.43413668 +0000 UTC m=+885.870695241 I0326 02:12:28.451730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ljvz5" condition "Ready" to 2026-03-26 02:12:28.451720488 +0000 UTC m=+885.888279049 I0326 02:12:28.474964 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:12:28.474947621 +0000 UTC m=+885.911506162 I0326 02:12:28.493549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:15:38.378122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:15:38.378212 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-26 02:15:38.378179034 +0000 UTC m=+1075.814737595 I0326 02:15:38.378407 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-26 02:15:38.378383608 +0000 UTC m=+1075.814942179 I0326 02:15:38.393159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:15:38.393241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:15:38.393260 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-26 02:15:38.393253475 +0000 UTC m=+1075.829812016 I0326 02:15:38.676525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-hvvqx" condition "Approved" to 2026-03-26 02:15:38.676508285 +0000 UTC m=+1076.113066826 I0326 02:15:38.694481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-hvvqx" condition "Ready" to 2026-03-26 02:15:38.694460399 +0000 UTC m=+1076.131018940 I0326 02:15:38.726831 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:15:38.72681698 +0000 UTC m=+1076.163375521 I0326 02:15:38.749011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:15:38.749432 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:15:38.749424227 +0000 UTC m=+1076.185982758 I0326 02:15:38.756449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:15:38.777554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"