I0428 03:18:03.145246 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 03:18:03.145393 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 03:18:03.145474 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 03:18:03.148967 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 03:18:03.149324 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 03:18:03.149402 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 03:18:03.149434 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 03:18:03.151830 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 03:18:03.164257 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 03:18:03.167923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 03:18:03.172698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 03:18:03.177794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 03:18:03.181267 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 03:18:03.181292 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 03:18:03.181303 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 03:18:03.181437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 03:18:03.183891 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 03:18:03.186234 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 03:18:03.188524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 03:18:03.190835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 03:18:03.195536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 03:18:03.201294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 03:18:03.204375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 03:18:03.206255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 03:18:03.208014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 03:18:03.210082 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 03:18:03.210109 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 03:18:03.210121 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 03:18:03.210211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 03:18:03.212358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 03:18:03.214241 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 03:18:03.216256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 03:18:03.219995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 03:18:03.223237 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.224025 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.224027 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.224426 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.224922 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.224972 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.225141 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.225985 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.226343 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:03.316972 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:18:35.259291 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 03:18:35.259281549 +0000 UTC m=+32.151200479 I0428 03:18:36.075162 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:36.075242 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 03:18:36.075232929 +0000 UTC m=+32.967151899 I0428 03:18:36.075689 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 03:18:36.075545234 +0000 UTC m=+32.967464164 E0428 03:18:36.094718 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:18:36.094806 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 03:18:36.094799054 +0000 UTC m=+32.986717994 E0428 03:18:36.094964 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:18:36.098073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:36.098161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:36.098189 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 03:18:36.098183144 +0000 UTC m=+32.990102064 E0428 03:18:36.112394 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 03:18:36.112604 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:18:36.112677 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:18:36.112726 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 03:18:36.154759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b2bqf" condition "Approved" to 2026-04-28 03:18:36.154747377 +0000 UTC m=+33.046666317 I0428 03:18:36.178657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b2bqf" condition "Ready" to 2026-04-28 03:18:36.178646976 +0000 UTC m=+33.070565906 I0428 03:18:36.219134 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:36.219108019 +0000 UTC m=+33.111026959 I0428 03:18:36.247321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:36.255594 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:36.255571382 +0000 UTC m=+33.147490312 I0428 03:18:36.289908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:36.290641 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:36.290630779 +0000 UTC m=+33.182549709 I0428 03:18:36.292221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:41.113040 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:41.113011197 +0000 UTC m=+38.004930127 I0428 03:18:42.665836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:42.665867 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:18:42.665860727 +0000 UTC m=+39.557779657 I0428 03:18:42.666157 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 03:18:42.66615222 +0000 UTC m=+39.558071160 I0428 03:18:42.844774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:42.844795 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 03:18:42.844783441 +0000 UTC m=+39.736702371 I0428 03:18:42.846691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:42.846725 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:18:42.846719842 +0000 UTC m=+39.738638772 I0428 03:18:43.292038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4nk88" condition "Approved" to 2026-04-28 03:18:43.292025745 +0000 UTC m=+40.183944675 I0428 03:18:43.330039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4nk88" condition "Ready" to 2026-04-28 03:18:43.330021841 +0000 UTC m=+40.221940771 I0428 03:18:43.404971 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:43.404961532 +0000 UTC m=+40.296880462 I0428 03:18:43.817193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:46.523053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:46.523096 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-28 03:18:46.523088624 +0000 UTC m=+43.415007564 I0428 03:18:46.523355 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-28 03:18:46.523338536 +0000 UTC m=+43.415257486 E0428 03:18:46.541869 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 03:18:46.541926 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-28 03:18:46.541919753 +0000 UTC m=+43.433838703 I0428 03:18:46.542010 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 03:18:46.545488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:46.545552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:46.545570 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-28 03:18:46.545565316 +0000 UTC m=+43.437484266 E0428 03:18:46.557633 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0428 03:18:46.559328 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 03:18:46.559391 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 03:18:46.559453 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0428 03:18:46.563663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:18:46.563693 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-28 03:18:46.563686742 +0000 UTC m=+43.455605682 I0428 03:18:46.565295 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-28 03:18:46.565289058 +0000 UTC m=+43.457208008 I0428 03:18:46.606335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:46.606486 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-28 03:18:46.60641008 +0000 UTC m=+43.498329020 I0428 03:18:46.839594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:46.875063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hpws4" condition "Approved" to 2026-04-28 03:18:46.875051254 +0000 UTC m=+43.766970194 I0428 03:18:46.898668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hpws4" condition "Ready" to 2026-04-28 03:18:46.89865759 +0000 UTC m=+43.790576530 I0428 03:18:46.955051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jvsvw" condition "Approved" to 2026-04-28 03:18:46.955023944 +0000 UTC m=+43.846942884 I0428 03:18:47.225537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jvsvw" condition "Ready" to 2026-04-28 03:18:47.225525765 +0000 UTC m=+44.117444705 I0428 03:18:47.319192 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:47.319173031 +0000 UTC m=+44.211091991 I0428 03:18:47.437164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:47.437671 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:47.437664719 +0000 UTC m=+44.329583649 I0428 03:18:47.440817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:47.459128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:18:47.459451 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:47.459371855 +0000 UTC m=+44.351290796 I0428 03:18:51.558653 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:51.558641521 +0000 UTC m=+48.450560461 I0428 03:18:52.351597 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-hpws4" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:52.351581868 +0000 UTC m=+49.243500828 I0428 03:18:56.279167 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:18:56.279127114 +0000 UTC m=+53.171046074 I0428 03:18:56.992288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:37.099912 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:29:37.099956 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-04-28 03:29:37.099946562 +0000 UTC m=+693.991865522 I0428 03:29:37.100503 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-04-28 03:29:37.100484633 +0000 UTC m=+693.992403603 I0428 03:29:37.121260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:37.121333 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-04-28 03:29:37.121326497 +0000 UTC m=+694.013245427 I0428 03:29:37.293832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:37.324434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-dlwvd" condition "Approved" to 2026-04-28 03:29:37.324421816 +0000 UTC m=+694.216340766 I0428 03:29:37.343635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-dlwvd" condition "Ready" to 2026-04-28 03:29:37.343613777 +0000 UTC m=+694.235532737 I0428 03:29:37.384387 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:37.384374718 +0000 UTC m=+694.276293658 I0428 03:29:37.411795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:37.412323 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:37.412314633 +0000 UTC m=+694.304233573 I0428 03:29:37.436499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"