I0420 10:19:54.805995 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 10:19:54.806148 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 10:19:54.806267 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 10:19:54.813857 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 10:19:54.814578 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 10:19:54.814714 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 10:19:54.814731 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 10:19:54.817591 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 10:19:54.832092 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 10:19:54.832284 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 10:19:54.835321 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 10:19:54.835421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 10:19:54.839901 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 10:19:54.846670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 10:19:54.853869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 10:19:54.856419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 10:19:54.858912 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 10:19:54.858947 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 10:19:54.858994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 10:19:54.861458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 10:19:54.863492 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 10:19:54.866555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 10:19:54.872109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 10:19:54.875528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 10:19:54.877750 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 10:19:54.877778 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 10:19:54.877855 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 10:19:54.880412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 10:19:54.882846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 10:19:54.885630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 10:19:54.887683 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 10:19:54.889553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 10:19:54.895169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 10:19:54.897852 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:54.898350 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:54.899241 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:54.900325 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:54.913649 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:54.967155 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:54.987329 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:55.004739 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:55.006960 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:19:55.024435 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:06.129185 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 10:20:06.129164929 +0000 UTC m=+11.371988362 I0420 10:20:06.893235 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 10:20:06.893216004 +0000 UTC m=+12.136039417 I0420 10:20:06.893608 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:06.893745 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:20:06.893732085 +0000 UTC m=+12.136555518 E0420 10:20:06.911581 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:20:06.911854 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 10:20:06.911841103 +0000 UTC m=+12.154664496 E0420 10:20:06.912952 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:20:06.913303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:06.913398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:06.913427 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:20:06.913417097 +0000 UTC m=+12.156240520 E0420 10:20:06.926524 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 10:20:06.926669 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:20:06.926730 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:20:06.926791 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 10:20:06.959599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-47lvd" condition "Approved" to 2026-04-20 10:20:06.95958072 +0000 UTC m=+12.202404123 I0420 10:20:06.974653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-47lvd" condition "Ready" to 2026-04-20 10:20:06.97463734 +0000 UTC m=+12.217460743 I0420 10:20:06.996066 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:06.99605033 +0000 UTC m=+12.238873733 I0420 10:20:07.013590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:11.927465 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:11.927442231 +0000 UTC m=+17.170265654 I0420 10:20:33.494526 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:20:33.494503781 +0000 UTC m=+38.737327184 I0420 10:20:33.494791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:33.494918 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:20:33.4949065 +0000 UTC m=+38.737729913 I0420 10:20:33.505814 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 10:20:33.505787379 +0000 UTC m=+38.748610782 I0420 10:20:33.522075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:33.522293 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:20:33.52215357 +0000 UTC m=+38.764977003 I0420 10:20:33.654263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:33.695200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7hg55" condition "Approved" to 2026-04-20 10:20:33.69518283 +0000 UTC m=+38.938006253 I0420 10:20:33.730928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7hg55" condition "Ready" to 2026-04-20 10:20:33.730904267 +0000 UTC m=+38.973727690 I0420 10:20:33.766572 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:33.766545112 +0000 UTC m=+39.009368535 I0420 10:20:33.797003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:33.797465 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:33.797455293 +0000 UTC m=+39.040278696 I0420 10:20:33.827693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:33.828325 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:33.828312742 +0000 UTC m=+39.071136175 I0420 10:20:33.828797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:16.781819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:16.781826 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 10:22:16.781769252 +0000 UTC m=+142.024592685 I0420 10:22:16.781898 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:22:16.781887494 +0000 UTC m=+142.024710887 E0420 10:22:16.797104 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:22:16.797230 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 10:22:16.797216974 +0000 UTC m=+142.040040407 I0420 10:22:16.797444 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:22:16.800267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:16.800384 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 10:22:16.800370144 +0000 UTC m=+142.043193577 E0420 10:22:16.806812 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 10:22:16.806916 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:22:16.806946 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 10:22:16.806978 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 10:22:16.812365 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 10:22:16.812344688 +0000 UTC m=+142.055168101 I0420 10:22:16.812450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:16.812614 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 10:22:16.812479991 +0000 UTC m=+142.055303404 I0420 10:22:16.830852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:16.830982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:16.831028 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 10:22:16.831015821 +0000 UTC m=+142.073839244 I0420 10:22:16.893117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:16.928084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g468v" condition "Approved" to 2026-04-20 10:22:16.928057636 +0000 UTC m=+142.170881129 I0420 10:22:16.959537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g468v" condition "Ready" to 2026-04-20 10:22:16.959521052 +0000 UTC m=+142.202344455 I0420 10:22:16.987709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hlwnh" condition "Approved" to 2026-04-20 10:22:16.987688605 +0000 UTC m=+142.230512008 I0420 10:22:16.991804 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:16.991789335 +0000 UTC m=+142.234612738 I0420 10:22:17.007047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hlwnh" condition "Ready" to 2026-04-20 10:22:17.007031701 +0000 UTC m=+142.249855104 I0420 10:22:17.012941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:21.809402 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:21.809387235 +0000 UTC m=+147.052210658 I0420 10:22:21.825637 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-hlwnh" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:21.825623664 +0000 UTC m=+147.068447047 I0420 10:22:21.856264 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:21.85623875 +0000 UTC m=+147.099062173 I0420 10:22:21.875144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:08.531097 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-04-20 10:25:08.530566856 +0000 UTC m=+313.773390259 I0420 10:25:08.531183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:25:08.531539 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-20 10:25:08.531517067 +0000 UTC m=+313.774340500 I0420 10:25:08.549675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:08.549820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:25:08.549865 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-20 10:25:08.54985172 +0000 UTC m=+313.792675153 I0420 10:25:08.701629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:08.710653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-c46xb" condition "Approved" to 2026-04-20 10:25:08.710624258 +0000 UTC m=+313.953447691 I0420 10:25:08.732108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-c46xb" condition "Ready" to 2026-04-20 10:25:08.73208446 +0000 UTC m=+313.974907903 I0420 10:25:08.764995 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:08.764980052 +0000 UTC m=+314.007803475 I0420 10:25:08.790329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:08.791085 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:08.791075834 +0000 UTC m=+314.033899227 I0420 10:25:08.799774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:08.815359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:08.815775 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:08.815763677 +0000 UTC m=+314.058587110 I0420 10:26:19.587805 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 10:26:19.587779444 +0000 UTC m=+384.830602867 I0420 10:26:19.588185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:26:19.588284 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:26:19.588276195 +0000 UTC m=+384.831099628 I0420 10:26:19.601411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:26:19.601522 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 10:26:19.601509905 +0000 UTC m=+384.844333318 E0420 10:26:19.602010 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:26:19.602110 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 10:26:19.602097818 +0000 UTC m=+384.844921251 E0420 10:26:19.602190 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:26:19.614411 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 10:26:19.615034 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:26:19.615083 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:26:19.615150 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 10:26:19.617785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:26:19.640462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-f7n8z" condition "Approved" to 2026-04-20 10:26:19.640428729 +0000 UTC m=+384.883252162 I0420 10:26:19.652495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-f7n8z" condition "Ready" to 2026-04-20 10:26:19.652477773 +0000 UTC m=+384.895301176 I0420 10:26:19.678138 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:26:19.678120886 +0000 UTC m=+384.920944289 I0420 10:26:19.694942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:26:19.749474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:26:24.615257 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:26:24.615233953 +0000 UTC m=+389.858057386 I0420 10:27:05.536194 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:27:05.53614459 +0000 UTC m=+430.778967983 I0420 10:27:05.536687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:05.536732 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:27:05.536727743 +0000 UTC m=+430.779551136 I0420 10:27:05.538801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:05.538871 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 10:27:05.538860261 +0000 UTC m=+430.781683664 I0420 10:27:05.539399 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:27:05.539382762 +0000 UTC m=+430.782206155 I0420 10:27:05.539495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:05.539607 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:27:05.539603847 +0000 UTC m=+430.782427240 I0420 10:27:05.539483 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:27:05.539476804 +0000 UTC m=+430.782300217 I0420 10:27:05.577486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:05.577586 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:27:05.577579198 +0000 UTC m=+430.820402591 I0420 10:27:05.577941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:05.577984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:05.578000 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:27:05.577996767 +0000 UTC m=+430.820820160 I0420 10:27:05.589553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:05.589664 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:27:05.589650348 +0000 UTC m=+430.832473751 I0420 10:27:05.651323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:05.690261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tbwz8" condition "Approved" to 2026-04-20 10:27:05.690247371 +0000 UTC m=+430.933070764 I0420 10:27:05.713287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tbwz8" condition "Ready" to 2026-04-20 10:27:05.713271326 +0000 UTC m=+430.956094719 I0420 10:27:05.768603 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:05.768586985 +0000 UTC m=+431.011410418 I0420 10:27:05.798692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:05.828706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4v5x6" condition "Approved" to 2026-04-20 10:27:05.828691412 +0000 UTC m=+431.071514825 I0420 10:27:05.850257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4v5x6" condition "Ready" to 2026-04-20 10:27:05.850241793 +0000 UTC m=+431.093065207 I0420 10:27:05.883037 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:05.883018788 +0000 UTC m=+431.125842211 I0420 10:27:05.883442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:05.980190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:05.980614 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:05.980603883 +0000 UTC m=+431.223427286 I0420 10:27:06.275133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:06.325263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:06.374402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:06.585533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5kcjp" condition "Approved" to 2026-04-20 10:27:06.585515339 +0000 UTC m=+431.828338742 I0420 10:27:06.742030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5kcjp" condition "Ready" to 2026-04-20 10:27:06.742014744 +0000 UTC m=+431.984838147 I0420 10:27:07.125342 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:07.125324127 +0000 UTC m=+432.368147530 I0420 10:27:07.227117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:07.227700 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:07.22768556 +0000 UTC m=+432.470508993 I0420 10:27:07.476849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:07.526510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:20.965910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:20.965951 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" condition "Issuing" to 2026-04-20 10:27:20.965942345 +0000 UTC m=+446.208765738 I0420 10:27:20.966182 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" condition "Ready" to 2026-04-20 10:27:20.96615964 +0000 UTC m=+446.208983043 I0420 10:27:20.986712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:20.986873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:20.986911 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" condition "Issuing" to 2026-04-20 10:27:20.986898375 +0000 UTC m=+446.229721798 I0420 10:27:21.178177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n5h5q-6zqbs" condition "Approved" to 2026-04-20 10:27:21.178156197 +0000 UTC m=+446.420979630 I0420 10:27:21.211193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-n5h5q-6zqbs" condition "Ready" to 2026-04-20 10:27:21.211175987 +0000 UTC m=+446.453999390 I0420 10:27:21.253379 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:21.253363872 +0000 UTC m=+446.496187265 I0420 10:27:21.289581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:21.290061 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:21.290052763 +0000 UTC m=+446.532876166 I0420 10:27:21.320624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:21.322037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:21.322399 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-n5h5q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:21.322389727 +0000 UTC m=+446.565213130 I0420 10:27:42.624815 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:27:42.624796198 +0000 UTC m=+467.867619591 I0420 10:27:42.624894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:42.624924 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 10:27:42.624913901 +0000 UTC m=+467.867737304 I0420 10:27:42.641124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:42.641214 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:27:42.641205675 +0000 UTC m=+467.884029078 I0420 10:27:42.901806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:42.943346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bw2xc" condition "Approved" to 2026-04-20 10:27:42.943331591 +0000 UTC m=+468.186154994 I0420 10:27:42.966051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bw2xc" condition "Ready" to 2026-04-20 10:27:42.966039519 +0000 UTC m=+468.208862922 I0420 10:27:42.994902 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:42.994883676 +0000 UTC m=+468.237707079 I0420 10:27:43.014394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:43.014709 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:43.014696759 +0000 UTC m=+468.257520162 I0420 10:27:43.037387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:02.101000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:31:02.101276 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 10:31:02.101261088 +0000 UTC m=+667.344084521 I0420 10:31:02.101103 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:31:02.101021592 +0000 UTC m=+667.343845015 I0420 10:31:02.122034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:02.122149 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:31:02.122140439 +0000 UTC m=+667.364963842 I0420 10:31:02.336962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:02.373909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5l86q" condition "Approved" to 2026-04-20 10:31:02.373897389 +0000 UTC m=+667.616720782 I0420 10:31:02.393384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5l86q" condition "Ready" to 2026-04-20 10:31:02.393374218 +0000 UTC m=+667.636197611 I0420 10:31:02.427540 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:31:02.427521568 +0000 UTC m=+667.670344991 I0420 10:31:02.459411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:02.459820 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:31:02.459812816 +0000 UTC m=+667.702636229 I0420 10:31:02.477587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:02.479830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:02.480416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:02.480757 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:31:02.48074682 +0000 UTC m=+667.723570223 I0420 10:33:33.570847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:33:33.570950 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 10:33:33.570936779 +0000 UTC m=+818.813760212 I0420 10:33:33.571626 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 10:33:33.571616044 +0000 UTC m=+818.814439487 I0420 10:33:33.592948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:33:33.599730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:33:33.599762 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 10:33:33.599756971 +0000 UTC m=+818.842580364 I0420 10:33:33.750160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bfbhp" condition "Approved" to 2026-04-20 10:33:33.750143045 +0000 UTC m=+818.992966468 I0420 10:33:33.772507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bfbhp" condition "Ready" to 2026-04-20 10:33:33.772495481 +0000 UTC m=+819.015318874 I0420 10:33:33.814421 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:33:33.81440446 +0000 UTC m=+819.057227863 I0420 10:33:33.837741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:33:33.838077 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:33:33.838070275 +0000 UTC m=+819.080893678 I0420 10:33:33.854933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:33:33.855316 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:33:33.855303266 +0000 UTC m=+819.098126659 I0420 10:34:40.450493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:34:40.450593 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 10:34:40.450583695 +0000 UTC m=+885.693407118 I0420 10:34:40.450753 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 10:34:40.450729178 +0000 UTC m=+885.693552601 I0420 10:34:40.475913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:34:40.476046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:34:40.476073 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 10:34:40.476062783 +0000 UTC m=+885.718886206 I0420 10:34:40.674030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:34:40.691616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-phpdg" condition "Approved" to 2026-04-20 10:34:40.691600408 +0000 UTC m=+885.934423831 I0420 10:34:40.728304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-phpdg" condition "Ready" to 2026-04-20 10:34:40.728290739 +0000 UTC m=+885.971114142 I0420 10:34:40.770050 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:34:40.770026646 +0000 UTC m=+886.012850069 I0420 10:34:40.794860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:34:40.795177 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:34:40.795170936 +0000 UTC m=+886.037994339 I0420 10:34:40.818157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:34:40.818593 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:34:40.818582396 +0000 UTC m=+886.061405789 I0420 10:37:48.218143 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 10:37:48.218100718 +0000 UTC m=+1073.460924111 I0420 10:37:48.218561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:37:48.218601 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 10:37:48.218592439 +0000 UTC m=+1073.461415842 I0420 10:37:48.231223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:37:48.231465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:37:48.231499 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 10:37:48.231490502 +0000 UTC m=+1073.474313935 I0420 10:37:48.748362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8h4xq" condition "Approved" to 2026-04-20 10:37:48.748348029 +0000 UTC m=+1073.991171462 I0420 10:37:48.768310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8h4xq" condition "Ready" to 2026-04-20 10:37:48.768298773 +0000 UTC m=+1074.011122166 I0420 10:37:48.802147 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:37:48.802135383 +0000 UTC m=+1074.044958766 I0420 10:37:48.823733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:37:48.824275 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:37:48.824268666 +0000 UTC m=+1074.067092059 I0420 10:37:48.857008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:37:48.857503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"