I0330 01:00:36.701783 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0330 01:00:36.701943 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0330 01:00:36.702032 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0330 01:00:36.705802 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0330 01:00:36.706217 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0330 01:00:36.706366 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0330 01:00:36.706433 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0330 01:00:36.708691 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0330 01:00:36.724955 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0330 01:00:36.730308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0330 01:00:36.737210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0330 01:00:36.740052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0330 01:00:36.742499 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0330 01:00:36.746223 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0330 01:00:36.747932 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0330 01:00:36.747958 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0330 01:00:36.748028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0330 01:00:36.750827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0330 01:00:36.757156 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0330 01:00:36.757270 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0330 01:00:36.760537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0330 01:00:36.763129 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0330 01:00:36.763220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0330 01:00:36.765848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0330 01:00:36.767707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0330 01:00:36.769458 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0330 01:00:36.769601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0330 01:00:36.772100 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0330 01:00:36.774115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0330 01:00:36.780546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0330 01:00:36.784481 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0330 01:00:36.787073 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0330 01:00:36.787113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0330 01:00:36.789477 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.789529 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.789871 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.811889 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.827432 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.851516 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.869396 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.880132 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.885262 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:36.900041 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0330 01:00:49.848962 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-30 01:00:49.848946467 +0000 UTC m=+13.181617912 I0330 01:00:50.626753 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-30 01:00:50.626734936 +0000 UTC m=+13.959406441 I0330 01:00:50.627216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:00:50.627315 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-30 01:00:50.627302201 +0000 UTC m=+13.959973696 E0330 01:00:50.641190 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0330 01:00:50.641281 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-30 01:00:50.64127107 +0000 UTC m=+13.973942515 E0330 01:00:50.641310 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0330 01:00:50.644107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:00:50.644206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:00:50.644232 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-30 01:00:50.644225669 +0000 UTC m=+13.976897104 E0330 01:00:50.656371 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0330 01:00:50.656613 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 01:00:50.656668 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 01:00:50.656745 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0330 01:00:50.684521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:00:50.693717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rqdx7" condition "Approved" to 2026-03-30 01:00:50.693702498 +0000 UTC m=+14.026373973 I0330 01:00:50.706104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rqdx7" condition "Ready" to 2026-03-30 01:00:50.706085774 +0000 UTC m=+14.038757219 I0330 01:00:50.729600 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:00:50.729584831 +0000 UTC m=+14.062256296 I0330 01:00:50.751136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:00:50.792295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:00:55.656997 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:00:55.656962354 +0000 UTC m=+18.989633819 I0330 01:01:16.870743 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-30 01:01:16.87068644 +0000 UTC m=+40.203357885 I0330 01:01:16.870754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:01:16.870911 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-30 01:01:16.870896486 +0000 UTC m=+40.203567961 I0330 01:01:16.879630 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-30 01:01:16.879612285 +0000 UTC m=+40.212283760 I0330 01:01:16.895974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:01:16.896084 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-30 01:01:16.896074557 +0000 UTC m=+40.228745992 I0330 01:01:17.045938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:01:17.081763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8jkng" condition "Approved" to 2026-03-30 01:01:17.081743835 +0000 UTC m=+40.414415290 I0330 01:01:17.112968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8jkng" condition "Ready" to 2026-03-30 01:01:17.112952405 +0000 UTC m=+40.445623870 I0330 01:01:17.148107 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:01:17.148092788 +0000 UTC m=+40.480764253 I0330 01:01:17.192776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:01:17.193112 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:01:17.193104011 +0000 UTC m=+40.525775446 I0330 01:01:17.222915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:02:51.785943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:02:51.786128 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-30 01:02:51.786117073 +0000 UTC m=+135.118788538 I0330 01:02:51.785996 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-30 01:02:51.785946548 +0000 UTC m=+135.118617993 E0330 01:02:51.802055 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0330 01:02:51.802125 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-30 01:02:51.802116894 +0000 UTC m=+135.134788339 I0330 01:02:51.802165 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0330 01:02:51.803306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:02:51.803373 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-30 01:02:51.803364866 +0000 UTC m=+135.136036311 E0330 01:02:51.811924 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0330 01:02:51.812021 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0330 01:02:51.812048 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0330 01:02:51.812093 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0330 01:02:51.812722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:02:51.812743 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-30 01:02:51.812738163 +0000 UTC m=+135.145409608 I0330 01:02:51.813000 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-30 01:02:51.812984159 +0000 UTC m=+135.145655644 I0330 01:02:51.827687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:02:51.827767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:02:51.827790 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-30 01:02:51.827781639 +0000 UTC m=+135.160453074 I0330 01:02:51.960631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:02:51.994178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-nkjjm" condition "Approved" to 2026-03-30 01:02:51.994146775 +0000 UTC m=+135.326818250 I0330 01:02:52.027724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-nkjjm" condition "Ready" to 2026-03-30 01:02:52.027709917 +0000 UTC m=+135.360381362 I0330 01:02:52.036834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-h6pgz" condition "Approved" to 2026-03-30 01:02:52.036821617 +0000 UTC m=+135.369493062 I0330 01:02:52.054926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-h6pgz" condition "Ready" to 2026-03-30 01:02:52.054913873 +0000 UTC m=+135.387585328 I0330 01:02:52.058395 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:02:52.058387484 +0000 UTC m=+135.391058929 I0330 01:02:52.076017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:02:56.812894 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:02:56.812880632 +0000 UTC m=+140.145552097 I0330 01:02:56.830207 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-h6pgz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:02:56.830178768 +0000 UTC m=+140.162850243 I0330 01:02:56.861321 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:02:56.861309606 +0000 UTC m=+140.193981051 I0330 01:02:56.886320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:02:56.886672 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:02:56.886660333 +0000 UTC m=+140.219331778 I0330 01:02:56.894353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:02:56.907285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:05:27.371212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-209.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:05:27.371296 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Issuing" to 2026-03-30 01:05:27.371275801 +0000 UTC m=+290.703947246 I0330 01:05:27.371775 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Ready" to 2026-03-30 01:05:27.371769614 +0000 UTC m=+290.704441059 I0330 01:05:27.389017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:05:27.389099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-209.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:05:27.389125 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Issuing" to 2026-03-30 01:05:27.389116421 +0000 UTC m=+290.721787886 I0330 01:05:27.487373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-209.nip.io-tls-slnmc" condition "Approved" to 2026-03-30 01:05:27.48735948 +0000 UTC m=+290.820030935 I0330 01:05:27.504661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-209.nip.io-tls-slnmc" condition "Ready" to 2026-03-30 01:05:27.504649195 +0000 UTC m=+290.837320630 I0330 01:05:27.532433 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:05:27.532424216 +0000 UTC m=+290.865095661 I0330 01:05:27.554515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:06:37.851835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:06:37.851864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-30 01:06:37.851846947 +0000 UTC m=+361.184518432 I0330 01:06:37.851888 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-30 01:06:37.851877358 +0000 UTC m=+361.184548823 E0330 01:06:37.865515 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0330 01:06:37.865555 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-30 01:06:37.865545038 +0000 UTC m=+361.198216483 E0330 01:06:37.865614 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0330 01:06:37.869164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:06:37.869276 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-30 01:06:37.869263916 +0000 UTC m=+361.201935391 E0330 01:06:37.876316 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0330 01:06:37.876399 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 01:06:37.876439 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0330 01:06:37.876479 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0330 01:06:37.881023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:06:37.881069 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-30 01:06:37.881063536 +0000 UTC m=+361.213734981 I0330 01:06:37.885542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jl6pm" condition "Approved" to 2026-03-30 01:06:37.885527494 +0000 UTC m=+361.218198939 I0330 01:06:37.888987 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-30 01:06:37.888977945 +0000 UTC m=+361.221649390 I0330 01:06:37.896198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:06:37.898066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jl6pm" condition "Ready" to 2026-03-30 01:06:37.898052104 +0000 UTC m=+361.230723549 I0330 01:06:37.917470 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:06:37.917450965 +0000 UTC m=+361.250122430 I0330 01:06:37.939846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:06:42.877410 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:06:42.877394006 +0000 UTC m=+366.210065481 I0330 01:07:19.033430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:07:19.033493 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-30 01:07:19.033481809 +0000 UTC m=+402.366153234 I0330 01:07:19.033680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:07:19.033694 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-30 01:07:19.033691404 +0000 UTC m=+402.366362829 I0330 01:07:19.033500 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-30 01:07:19.033493859 +0000 UTC m=+402.366165284 I0330 01:07:19.033944 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-30 01:07:19.033939812 +0000 UTC m=+402.366611247 I0330 01:07:19.047169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:07:19.047201 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-30 01:07:19.047193321 +0000 UTC m=+402.379864746 I0330 01:07:19.047244 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-30 01:07:19.047231951 +0000 UTC m=+402.379903386 I0330 01:07:19.056243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:19.056326 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-30 01:07:19.05631972 +0000 UTC m=+402.388991155 I0330 01:07:19.058502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:19.058557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:07:19.058578 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-30 01:07:19.05857326 +0000 UTC m=+402.391244685 I0330 01:07:19.074627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:19.074746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:07:19.074780 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-30 01:07:19.074772067 +0000 UTC m=+402.407443512 I0330 01:07:19.184553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:19.194881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2xmdf" condition "Approved" to 2026-03-30 01:07:19.194870878 +0000 UTC m=+402.527542303 I0330 01:07:19.218352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2xmdf" condition "Ready" to 2026-03-30 01:07:19.218337436 +0000 UTC m=+402.551008911 I0330 01:07:19.238174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:19.247878 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:19.247865823 +0000 UTC m=+402.580537268 I0330 01:07:19.265569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:19.266046 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:19.266036142 +0000 UTC m=+402.598707607 I0330 01:07:19.297133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:19.310012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0330 01:07:19.312361 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-fnz2p\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0330 01:07:19.321563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vzp52" condition "Approved" to 2026-03-30 01:07:19.321552343 +0000 UTC m=+402.654223778 I0330 01:07:19.356800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vzp52" condition "Ready" to 2026-03-30 01:07:19.356790701 +0000 UTC m=+402.689462136 I0330 01:07:19.674771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hdj6q" condition "Approved" to 2026-03-30 01:07:19.674753912 +0000 UTC m=+403.007425357 E0330 01:07:19.720254 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-crzkt\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0330 01:07:19.779619 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:19.779604812 +0000 UTC m=+403.112276247 I0330 01:07:19.827453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hdj6q" condition "Ready" to 2026-03-30 01:07:19.827440712 +0000 UTC m=+403.160112157 I0330 01:07:20.221091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:20.221285 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:20.221279251 +0000 UTC m=+403.553950676 I0330 01:07:20.573909 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:20.573877294 +0000 UTC m=+403.906548759 I0330 01:07:20.621896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:20.720969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:20.721514 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:20.721502139 +0000 UTC m=+404.054173584 I0330 01:07:20.975208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:27.209859 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" condition "Ready" to 2026-03-30 01:07:27.209841949 +0000 UTC m=+410.542513394 I0330 01:07:27.209923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:07:27.209954 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" condition "Issuing" to 2026-03-30 01:07:27.209943742 +0000 UTC m=+410.542615207 I0330 01:07:27.229016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m72mz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:27.229118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:07:27.229140 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" condition "Issuing" to 2026-03-30 01:07:27.229131437 +0000 UTC m=+410.561802882 I0330 01:07:27.585170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m72mz-b5466" condition "Approved" to 2026-03-30 01:07:27.58515412 +0000 UTC m=+410.917825585 I0330 01:07:27.657733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m72mz-b5466" condition "Ready" to 2026-03-30 01:07:27.65771815 +0000 UTC m=+410.990389595 I0330 01:07:27.705183 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:27.705164969 +0000 UTC m=+411.037836414 I0330 01:07:27.768394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m72mz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:27.859824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m72mz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m72mz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:49.852843 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-30 01:07:49.852796891 +0000 UTC m=+433.185468336 I0330 01:07:49.853187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:07:49.853239 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-30 01:07:49.853227112 +0000 UTC m=+433.185898587 I0330 01:07:49.868090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:49.868250 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-30 01:07:49.868192807 +0000 UTC m=+433.200864282 I0330 01:07:50.102604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:50.138114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9mvpb" condition "Approved" to 2026-03-30 01:07:50.138098282 +0000 UTC m=+433.470769727 I0330 01:07:50.156508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9mvpb" condition "Ready" to 2026-03-30 01:07:50.156495447 +0000 UTC m=+433.489166882 I0330 01:07:50.183999 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:50.183981931 +0000 UTC m=+433.516653396 I0330 01:07:50.241445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:50.241671 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:50.241663669 +0000 UTC m=+433.574335104 I0330 01:07:50.244974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:50.259098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:07:50.259433 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:07:50.259425977 +0000 UTC m=+433.592097422 I0330 01:11:06.511966 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-30 01:11:06.511919685 +0000 UTC m=+629.844591140 I0330 01:11:06.512328 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:11:06.512405 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-30 01:11:06.512396687 +0000 UTC m=+629.845068162 I0330 01:11:06.529327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:11:06.529532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:11:06.529568 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-30 01:11:06.529558159 +0000 UTC m=+629.862229624 I0330 01:11:06.801613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:11:06.810307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bx4vp" condition "Approved" to 2026-03-30 01:11:06.810293602 +0000 UTC m=+630.142965037 I0330 01:11:06.832732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bx4vp" condition "Ready" to 2026-03-30 01:11:06.832710751 +0000 UTC m=+630.165382226 I0330 01:11:06.863268 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:11:06.863256694 +0000 UTC m=+630.195928119 I0330 01:11:06.888314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:13:35.640622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:13:35.640738 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-30 01:13:35.640697139 +0000 UTC m=+778.973368604 I0330 01:13:35.640767 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-30 01:13:35.640709129 +0000 UTC m=+778.973380634 I0330 01:13:35.657596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:13:35.657718 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-30 01:13:35.657706934 +0000 UTC m=+778.990378399 I0330 01:13:35.921958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:13:35.957594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vdb8z" condition "Approved" to 2026-03-30 01:13:35.957581686 +0000 UTC m=+779.290253161 I0330 01:13:35.980074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vdb8z" condition "Ready" to 2026-03-30 01:13:35.980053351 +0000 UTC m=+779.312724816 I0330 01:13:36.015323 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:13:36.015311371 +0000 UTC m=+779.347982796 I0330 01:13:36.043785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:14:43.039408 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-30 01:14:43.039383 +0000 UTC m=+846.372054475 I0330 01:14:43.039861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:14:43.039899 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-30 01:14:43.039890464 +0000 UTC m=+846.372561899 I0330 01:14:43.058774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:14:43.058855 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-30 01:14:43.05884818 +0000 UTC m=+846.391519625 I0330 01:14:43.421459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:14:43.466231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zzt49" condition "Approved" to 2026-03-30 01:14:43.466208815 +0000 UTC m=+846.798880260 I0330 01:14:43.484820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zzt49" condition "Ready" to 2026-03-30 01:14:43.484806811 +0000 UTC m=+846.817478246 I0330 01:14:43.518669 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:14:43.518656929 +0000 UTC m=+846.851328364 I0330 01:14:43.557322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:14:43.557804 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:14:43.557792012 +0000 UTC m=+846.890463487 I0330 01:14:43.566215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:14:43.577337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:14:43.577661 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:14:43.577653551 +0000 UTC m=+846.910324996 I0330 01:17:50.284995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:17:50.285118 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-30 01:17:50.285103507 +0000 UTC m=+1033.617774982 I0330 01:17:50.285062 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-30 01:17:50.28484877 +0000 UTC m=+1033.617520235 I0330 01:17:50.303428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:17:50.303665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0330 01:17:50.303701 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-30 01:17:50.303690704 +0000 UTC m=+1033.636362169 I0330 01:17:50.508951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8bsst" condition "Approved" to 2026-03-30 01:17:50.508934832 +0000 UTC m=+1033.841606277 I0330 01:17:50.529380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8bsst" condition "Ready" to 2026-03-30 01:17:50.529362177 +0000 UTC m=+1033.862033622 I0330 01:17:50.568778 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:17:50.568748458 +0000 UTC m=+1033.901419903 I0330 01:17:50.590205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0330 01:17:50.590531 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-30 01:17:50.590524619 +0000 UTC m=+1033.923196064 I0330 01:17:50.612982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"