I0313 09:54:00.098258 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0313 09:54:00.098570 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0313 09:54:00.098678 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0313 09:54:00.101140 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0313 09:54:00.101547 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0313 09:54:00.101806 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0313 09:54:00.101800 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0313 09:54:00.103579 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0313 09:54:00.119850 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0313 09:54:00.120213 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0313 09:54:00.127091 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0313 09:54:00.131849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0313 09:54:00.134865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0313 09:54:00.138999 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0313 09:54:00.140266 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0313 09:54:00.142559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0313 09:54:00.144432 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0313 09:54:00.144484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0313 09:54:00.157539 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0313 09:54:00.159662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0313 09:54:00.161437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0313 09:54:00.163215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0313 09:54:00.165483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0313 09:54:00.169249 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0313 09:54:00.169309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0313 09:54:00.172660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0313 09:54:00.177461 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0313 09:54:00.181843 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0313 09:54:00.181873 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0313 09:54:00.182006 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0313 09:54:00.184669 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0313 09:54:00.187384 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0313 09:54:00.187933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0313 09:54:00.191014 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.191654 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.192922 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.193248 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.207755 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.238493 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.244791 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.256046 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.279679 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:00.299487 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:54:13.447512 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-13 09:54:13.447494384 +0000 UTC m=+13.400016596 I0313 09:54:14.273399 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-13 09:54:14.273381038 +0000 UTC m=+14.225903240 I0313 09:54:14.274014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:54:14.274118 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-13 09:54:14.274102665 +0000 UTC m=+14.226624877 E0313 09:54:14.288143 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 09:54:14.288228 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-13 09:54:14.288218866 +0000 UTC m=+14.240741048 E0313 09:54:14.288254 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 09:54:14.293158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:54:14.293271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:54:14.293300 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-13 09:54:14.293291169 +0000 UTC m=+14.245813381 E0313 09:54:14.299926 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0313 09:54:14.300212 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 09:54:14.300332 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 09:54:14.300433 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0313 09:54:14.331227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:54:14.336404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kxm7j" condition "Approved" to 2026-03-13 09:54:14.336389271 +0000 UTC m=+14.288911453 I0313 09:54:14.349290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kxm7j" condition "Ready" to 2026-03-13 09:54:14.349274793 +0000 UTC m=+14.301796985 I0313 09:54:14.372261 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:54:14.372239858 +0000 UTC m=+14.324762040 I0313 09:54:14.391103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:54:14.443942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:54:19.300708 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:54:19.300691511 +0000 UTC m=+19.253213723 I0313 09:54:41.017830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:54:41.018057 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-13 09:54:41.018048391 +0000 UTC m=+40.970570583 I0313 09:54:41.018230 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-13 09:54:41.018143823 +0000 UTC m=+40.970666095 I0313 09:54:41.034101 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-13 09:54:41.034087936 +0000 UTC m=+40.986610098 I0313 09:54:41.045851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:54:41.046009 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-13 09:54:41.045997706 +0000 UTC m=+40.998519888 I0313 09:54:41.164626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:54:41.202848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8trp4" condition "Approved" to 2026-03-13 09:54:41.202827704 +0000 UTC m=+41.155349886 I0313 09:54:41.235972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8trp4" condition "Ready" to 2026-03-13 09:54:41.235960051 +0000 UTC m=+41.188482233 I0313 09:54:41.272928 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:54:41.272912047 +0000 UTC m=+41.225434229 I0313 09:54:41.295517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:54:41.356349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:37.508326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:56:37.508411 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-13 09:56:37.50838327 +0000 UTC m=+157.460905442 I0313 09:56:37.508678 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-13 09:56:37.508659057 +0000 UTC m=+157.461181239 E0313 09:56:37.520573 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 09:56:37.520669 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-13 09:56:37.520661891 +0000 UTC m=+157.473184073 I0313 09:56:37.520688 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 09:56:37.529566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:37.529723 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-13 09:56:37.529709741 +0000 UTC m=+157.482231923 E0313 09:56:37.532999 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0313 09:56:37.533139 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 09:56:37.533182 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0313 09:56:37.533260 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0313 09:56:37.534066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:56:37.534098 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-13 09:56:37.534090232 +0000 UTC m=+157.486612404 I0313 09:56:37.534397 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-13 09:56:37.534387079 +0000 UTC m=+157.486909261 I0313 09:56:37.553493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:37.553623 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-13 09:56:37.553610078 +0000 UTC m=+157.506132280 I0313 09:56:37.679048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:37.711913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lh978" condition "Approved" to 2026-03-13 09:56:37.711901194 +0000 UTC m=+157.664423366 I0313 09:56:37.736767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lh978" condition "Ready" to 2026-03-13 09:56:37.736752085 +0000 UTC m=+157.689274257 I0313 09:56:37.763116 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:37.763099933 +0000 UTC m=+157.715622135 I0313 09:56:37.783888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:37.850826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:37.881802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-wwrhj" condition "Approved" to 2026-03-13 09:56:37.881784024 +0000 UTC m=+157.834306206 I0313 09:56:37.900599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-wwrhj" condition "Ready" to 2026-03-13 09:56:37.90054327 +0000 UTC m=+157.853065472 I0313 09:56:42.534162 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:42.534143124 +0000 UTC m=+162.486665336 I0313 09:56:42.552719 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-wwrhj" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:42.552703376 +0000 UTC m=+162.505225588 I0313 09:56:42.583458 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:42.583441386 +0000 UTC m=+162.535963588 I0313 09:56:42.603196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:42.603756 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:42.603748611 +0000 UTC m=+162.556270793 I0313 09:56:42.621647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:42.627727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:59:19.501345 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready" to 2026-03-13 09:59:19.501288423 +0000 UTC m=+319.453810625 I0313 09:59:19.501548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-123.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:59:19.501602 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Issuing" to 2026-03-13 09:59:19.50159104 +0000 UTC m=+319.454113222 I0313 09:59:19.520267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:59:19.520380 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready" to 2026-03-13 09:59:19.520365825 +0000 UTC m=+319.472888007 I0313 09:59:19.624260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:59:19.657418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-123.nip.io-tls-5dc7z" condition "Approved" to 2026-03-13 09:59:19.65740432 +0000 UTC m=+319.609926502 I0313 09:59:19.683296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-123.nip.io-tls-5dc7z" condition "Ready" to 2026-03-13 09:59:19.683285091 +0000 UTC m=+319.635807263 I0313 09:59:19.714329 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:59:19.71431623 +0000 UTC m=+319.666838402 I0313 09:59:19.738556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:59:19.739047 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-123.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:59:19.739036873 +0000 UTC m=+319.691559085 I0313 09:59:19.760036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-123.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-123.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:00:32.866555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:00:32.866617 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-13 10:00:32.866606559 +0000 UTC m=+392.819128741 I0313 10:00:32.866538 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-13 10:00:32.866504806 +0000 UTC m=+392.819027018 E0313 10:00:32.878936 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 10:00:32.878988 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-13 10:00:32.878983326 +0000 UTC m=+392.831505498 E0313 10:00:32.879057 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 10:00:32.882167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:00:32.882262 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-13 10:00:32.882253036 +0000 UTC m=+392.834775218 E0313 10:00:32.891380 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0313 10:00:32.891465 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 10:00:32.891496 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 10:00:32.891530 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0313 10:00:32.899485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:00:32.937996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-krbr2" condition "Approved" to 2026-03-13 10:00:32.937980365 +0000 UTC m=+392.890502557 I0313 10:00:32.956752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-krbr2" condition "Ready" to 2026-03-13 10:00:32.956739179 +0000 UTC m=+392.909261361 I0313 10:00:32.991285 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:00:32.991267874 +0000 UTC m=+392.943790046 I0313 10:00:33.015175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:00:33.015651 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:00:33.015637706 +0000 UTC m=+392.968159908 I0313 10:00:33.038664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:00:37.891873 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:00:37.891858904 +0000 UTC m=+397.844381106 I0313 10:01:17.711747 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-13 10:01:17.711710458 +0000 UTC m=+437.664232630 I0313 10:01:17.712045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:17.712082 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 10:01:17.712079808 +0000 UTC m=+437.664601980 I0313 10:01:17.712237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:17.712250 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-13 10:01:17.712248032 +0000 UTC m=+437.664770204 I0313 10:01:17.712369 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-13 10:01:17.712366405 +0000 UTC m=+437.664888567 I0313 10:01:17.712513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:17.712532 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-13 10:01:17.712524829 +0000 UTC m=+437.665047001 I0313 10:01:17.712628 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-13 10:01:17.712624971 +0000 UTC m=+437.665147133 I0313 10:01:17.738096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:17.738165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:17.738190 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 10:01:17.738183305 +0000 UTC m=+437.690705487 I0313 10:01:17.745572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:17.745611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:17.745627 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-13 10:01:17.745623906 +0000 UTC m=+437.698146078 I0313 10:01:17.748538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:17.748576 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-13 10:01:17.748572989 +0000 UTC m=+437.701095161 I0313 10:01:17.883142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:17.920884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2bn6r" condition "Approved" to 2026-03-13 10:01:17.920870004 +0000 UTC m=+437.873392186 I0313 10:01:17.943062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2bn6r" condition "Ready" to 2026-03-13 10:01:17.943029245 +0000 UTC m=+437.895551467 I0313 10:01:17.979191 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:17.979166527 +0000 UTC m=+437.931688699 I0313 10:01:18.017253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:18.093331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:18.098554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:18.104221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5wljp" condition "Approved" to 2026-03-13 10:01:18.104212439 +0000 UTC m=+438.056734611 I0313 10:01:18.123448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5wljp" condition "Ready" to 2026-03-13 10:01:18.123436358 +0000 UTC m=+438.075958540 I0313 10:01:18.251122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hq2tt" condition "Approved" to 2026-03-13 10:01:18.251107504 +0000 UTC m=+438.203629696 I0313 10:01:18.306815 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:18.306799784 +0000 UTC m=+438.259321966 I0313 10:01:18.407860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hq2tt" condition "Ready" to 2026-03-13 10:01:18.40784639 +0000 UTC m=+438.360368582 I0313 10:01:18.746175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:18.746977 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:18.746963168 +0000 UTC m=+438.699485360 I0313 10:01:19.164433 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:19.164413437 +0000 UTC m=+439.116935639 I0313 10:01:19.198662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:19.248633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:19.351613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:27.105564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:27.105611 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" condition "Issuing" to 2026-03-13 10:01:27.105599626 +0000 UTC m=+447.058121828 I0313 10:01:27.106362 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" condition "Ready" to 2026-03-13 10:01:27.106349054 +0000 UTC m=+447.058871266 I0313 10:01:27.120528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cgktv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:27.120596 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" condition "Ready" to 2026-03-13 10:01:27.120588742 +0000 UTC m=+447.073110924 I0313 10:01:27.393040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cgktv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:27.443052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cgktv-82v2p" condition "Approved" to 2026-03-13 10:01:27.443035411 +0000 UTC m=+447.395557613 I0313 10:01:27.475275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cgktv-82v2p" condition "Ready" to 2026-03-13 10:01:27.475259229 +0000 UTC m=+447.427781411 I0313 10:01:27.714120 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:27.714103408 +0000 UTC m=+447.666625600 I0313 10:01:27.944456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cgktv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:27.944682 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:27.944674886 +0000 UTC m=+447.897197058 I0313 10:01:27.964359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgktv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cgktv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:56.256737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:56.256769 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-13 10:01:56.256761994 +0000 UTC m=+476.209284156 I0313 10:01:56.256836 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-13 10:01:56.256817615 +0000 UTC m=+476.209339817 I0313 10:01:56.272423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:56.272515 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-13 10:01:56.272505326 +0000 UTC m=+476.225027508 I0313 10:01:56.445764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:56.494696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rzvq6" condition "Approved" to 2026-03-13 10:01:56.494670904 +0000 UTC m=+476.447193126 I0313 10:01:56.517765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rzvq6" condition "Ready" to 2026-03-13 10:01:56.517755826 +0000 UTC m=+476.470277998 I0313 10:01:56.552089 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:56.552076731 +0000 UTC m=+476.504598903 I0313 10:01:56.574183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:56.574597 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:56.574589899 +0000 UTC m=+476.527112071 I0313 10:01:56.597553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:56.598027 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:56.59801643 +0000 UTC m=+476.550538632 I0313 10:01:56.599461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:05:12.039491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:05:12.039581 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-13 10:05:12.039548984 +0000 UTC m=+671.992071156 I0313 10:05:12.039595 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-13 10:05:12.039576755 +0000 UTC m=+671.992098957 I0313 10:05:12.075586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:05:12.075696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:05:12.075719 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-13 10:05:12.075712572 +0000 UTC m=+672.028234744 I0313 10:05:12.478544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:05:12.549132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-t9khv" condition "Approved" to 2026-03-13 10:05:12.549118209 +0000 UTC m=+672.501640421 I0313 10:05:12.670858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-t9khv" condition "Ready" to 2026-03-13 10:05:12.670843798 +0000 UTC m=+672.623366000 I0313 10:05:12.763549 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:05:12.763535202 +0000 UTC m=+672.716057394 I0313 10:05:12.849025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:05:12.849595 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:05:12.849588086 +0000 UTC m=+672.802110278 I0313 10:05:12.891554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:39.065667 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-13 10:07:39.065631172 +0000 UTC m=+819.018153344 I0313 10:07:39.065999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:07:39.066082 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-13 10:07:39.066075532 +0000 UTC m=+819.018597704 I0313 10:07:39.080974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:39.081101 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:07:39.081128 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-13 10:07:39.081119418 +0000 UTC m=+819.033641590 I0313 10:07:39.245336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-k649q" condition "Approved" to 2026-03-13 10:07:39.245325574 +0000 UTC m=+819.197847746 I0313 10:07:39.286987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-k649q" condition "Ready" to 2026-03-13 10:07:39.286971281 +0000 UTC m=+819.239493493 I0313 10:07:39.330543 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:07:39.330511161 +0000 UTC m=+819.283033373 I0313 10:07:39.375901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:39.376228 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:07:39.376221639 +0000 UTC m=+819.328743801 I0313 10:07:39.399142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:39.410624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:08:42.692743 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:08:42.692805 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-13 10:08:42.692787488 +0000 UTC m=+882.645309670 I0313 10:08:42.692807 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-13 10:08:42.692787588 +0000 UTC m=+882.645309800 I0313 10:08:42.710467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:08:42.710598 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-13 10:08:42.710586214 +0000 UTC m=+882.663108396 I0313 10:08:43.212065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:08:43.253362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fv8jd" condition "Approved" to 2026-03-13 10:08:43.25334825 +0000 UTC m=+883.205870432 I0313 10:08:43.281624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fv8jd" condition "Ready" to 2026-03-13 10:08:43.281615869 +0000 UTC m=+883.234138051 I0313 10:08:43.315689 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:08:43.315671118 +0000 UTC m=+883.268193290 I0313 10:08:43.341701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:11:37.303695 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-13 10:11:37.303661176 +0000 UTC m=+1057.256183358 I0313 10:11:37.303691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:11:37.303982 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-13 10:11:37.303950063 +0000 UTC m=+1057.256472275 I0313 10:11:37.322464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:11:37.322650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:11:37.322715 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-13 10:11:37.322705588 +0000 UTC m=+1057.275227790 I0313 10:11:37.500464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:11:37.508440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-v22ql" condition "Approved" to 2026-03-13 10:11:37.508422062 +0000 UTC m=+1057.460944244 I0313 10:11:37.528011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-v22ql" condition "Ready" to 2026-03-13 10:11:37.528000067 +0000 UTC m=+1057.480522239 I0313 10:11:37.566564 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:11:37.566552253 +0000 UTC m=+1057.519074425 I0313 10:11:37.585623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:11:37.586079 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:11:37.586070886 +0000 UTC m=+1057.538593058 I0313 10:11:37.591863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:11:37.605423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:11:37.605913 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:11:37.605901938 +0000 UTC m=+1057.558424120 I0313 10:11:37.606606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"