I0418 22:15:24.503668 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 22:15:24.503876 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 22:15:24.504010 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 22:15:24.511484 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 22:15:24.512276 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 22:15:24.512366 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 22:15:24.512375 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 22:15:24.517222 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 22:15:24.534129 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 22:15:24.537734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 22:15:24.540568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 22:15:24.547323 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 22:15:24.547407 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 22:15:24.547439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 22:15:24.547442 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 22:15:24.550869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 22:15:24.553518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 22:15:24.555400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 22:15:24.557400 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 22:15:24.557441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 22:15:24.557464 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 22:15:24.559253 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 22:15:24.563335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 22:15:24.567799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 22:15:24.570564 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 22:15:24.572353 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 22:15:24.574342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 22:15:24.576368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 22:15:24.578399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 22:15:24.580173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 22:15:24.582543 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 22:15:24.587958 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 22:15:24.588222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 22:15:24.590867 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.591389 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.591506 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.591535 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.591664 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.591825 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.591989 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.592329 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.592567 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:24.683727 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:15:35.412108 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 22:15:35.412089567 +0000 UTC m=+10.938401655 I0418 22:15:36.176341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:15:36.176437 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 22:15:36.176425526 +0000 UTC m=+11.702737634 I0418 22:15:36.176532 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 22:15:36.176505687 +0000 UTC m=+11.702817785 E0418 22:15:36.190814 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:15:36.190896 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 22:15:36.190885976 +0000 UTC m=+11.717198054 E0418 22:15:36.190932 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:15:36.194742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:15:36.194897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:15:36.194931 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 22:15:36.194923997 +0000 UTC m=+11.721236065 E0418 22:15:36.201384 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 22:15:36.201578 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:15:36.201653 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:15:36.201694 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 22:15:36.237335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:15:36.241957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2tp4l" condition "Approved" to 2026-04-18 22:15:36.241943962 +0000 UTC m=+11.768256050 I0418 22:15:36.253648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2tp4l" condition "Ready" to 2026-04-18 22:15:36.253641946 +0000 UTC m=+11.779954014 I0418 22:15:36.273424 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:15:36.273417184 +0000 UTC m=+11.799729252 I0418 22:15:36.290376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:15:41.201860 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:15:41.201845101 +0000 UTC m=+16.728157189 I0418 22:16:02.674088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:02.674152 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 22:16:02.674138654 +0000 UTC m=+38.200450722 I0418 22:16:02.674077 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 22:16:02.674017022 +0000 UTC m=+38.200329110 I0418 22:16:02.685697 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 22:16:02.685686985 +0000 UTC m=+38.211999073 I0418 22:16:02.696107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:02.696164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:16:02.696182 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 22:16:02.696179645 +0000 UTC m=+38.222491703 I0418 22:16:02.949413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j5b9r" condition "Approved" to 2026-04-18 22:16:02.949381549 +0000 UTC m=+38.475693637 I0418 22:16:02.986579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j5b9r" condition "Ready" to 2026-04-18 22:16:02.986568314 +0000 UTC m=+38.512880402 I0418 22:16:03.023225 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:16:03.023196567 +0000 UTC m=+38.549508635 I0418 22:16:03.050108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:16:03.124582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:52.220352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:17:52.220390 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-18 22:17:52.22038466 +0000 UTC m=+147.746696748 I0418 22:17:52.220199 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-18 22:17:52.220151145 +0000 UTC m=+147.746463243 E0418 22:17:52.237386 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 22:17:52.237620 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-18 22:17:52.237608794 +0000 UTC m=+147.763920892 I0418 22:17:52.237658 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 22:17:52.239334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:52.239537 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-18 22:17:52.239531143 +0000 UTC m=+147.765843211 E0418 22:17:52.248968 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0418 22:17:52.249106 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 22:17:52.249150 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0418 22:17:52.249179 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0418 22:17:52.252679 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 22:17:52.252647204 +0000 UTC m=+147.778959262 I0418 22:17:52.252847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:17:52.252871 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-18 22:17:52.252865978 +0000 UTC m=+147.779178046 I0418 22:17:52.268241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:52.268326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:17:52.268352 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-18 22:17:52.268346108 +0000 UTC m=+147.794658166 I0418 22:17:52.327392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:52.356396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-hfzd7" condition "Approved" to 2026-04-18 22:17:52.356369268 +0000 UTC m=+147.882681356 I0418 22:17:52.386214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-hfzd7" condition "Ready" to 2026-04-18 22:17:52.386199135 +0000 UTC m=+147.912511203 I0418 22:17:52.415055 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:52.415034651 +0000 UTC m=+147.941346749 I0418 22:17:52.426576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:52.435051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:52.435505 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:52.435494859 +0000 UTC m=+147.961806927 I0418 22:17:52.436342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-qpz52" condition "Approved" to 2026-04-18 22:17:52.436312627 +0000 UTC m=+147.962624715 I0418 22:17:52.491242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:52.493676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:52.498739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-qpz52" condition "Ready" to 2026-04-18 22:17:52.498729814 +0000 UTC m=+148.025041882 I0418 22:17:57.250396 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:57.250383495 +0000 UTC m=+152.776695583 I0418 22:17:57.267546 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-qpz52" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:57.267530618 +0000 UTC m=+152.793842706 I0418 22:17:57.298608 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:57.298593219 +0000 UTC m=+152.824905287 I0418 22:17:57.319578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:57.320115 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:57.320097769 +0000 UTC m=+152.846409857 I0418 22:17:57.331323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:57.341677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:17:57.342051 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:17:57.342040878 +0000 UTC m=+152.868352946 I0418 22:20:28.067592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-49.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:20:28.067691 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Issuing" to 2026-04-18 22:20:28.067682346 +0000 UTC m=+303.593994434 I0418 22:20:28.067592 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-04-18 22:20:28.067553173 +0000 UTC m=+303.593865271 I0418 22:20:28.086959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:28.087040 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-04-18 22:20:28.087032654 +0000 UTC m=+303.613344722 I0418 22:20:28.395929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:28.430599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-2lcrz" condition "Approved" to 2026-04-18 22:20:28.43058548 +0000 UTC m=+303.956897548 I0418 22:20:28.449941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-2lcrz" condition "Ready" to 2026-04-18 22:20:28.449926557 +0000 UTC m=+303.976238645 I0418 22:20:28.472806 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:28.472786625 +0000 UTC m=+303.999098713 I0418 22:20:28.503376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:28.503698 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:28.503688565 +0000 UTC m=+304.030000633 I0418 22:20:28.507755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:28.519490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:28.520246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:28.520496 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:28.520485461 +0000 UTC m=+304.046797529 I0418 22:21:38.909848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:21:38.910223 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 22:21:38.909939716 +0000 UTC m=+374.436251804 I0418 22:21:38.910250 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 22:21:38.90961822 +0000 UTC m=+374.435930308 I0418 22:21:38.924303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:21:38.924388 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 22:21:38.924379995 +0000 UTC m=+374.450692063 E0418 22:21:38.929820 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:21:38.930014 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 22:21:38.930003068 +0000 UTC m=+374.456315126 E0418 22:21:38.930079 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:21:38.945646 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 22:21:38.945849 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:21:38.945923 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:21:38.945954 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 22:21:38.946521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:21:38.966349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrvrc" condition "Approved" to 2026-04-18 22:21:38.966329746 +0000 UTC m=+374.492641844 I0418 22:21:38.980849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrvrc" condition "Ready" to 2026-04-18 22:21:38.980841136 +0000 UTC m=+374.507153194 I0418 22:21:39.004720 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:21:39.004704195 +0000 UTC m=+374.531016263 I0418 22:21:39.027386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:21:39.069832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:21:43.946355 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:21:43.946341635 +0000 UTC m=+379.472653723 I0418 22:22:23.768108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:23.768176 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 22:22:23.76816676 +0000 UTC m=+419.294478828 I0418 22:22:23.768194 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 22:22:23.768185971 +0000 UTC m=+419.294498039 I0418 22:22:23.768400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:23.774192 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 22:22:23.774184631 +0000 UTC m=+419.300496709 I0418 22:22:23.772401 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 22:22:23.772386015 +0000 UTC m=+419.298698073 I0418 22:22:23.772569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:23.774752 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 22:22:23.774745262 +0000 UTC m=+419.301057330 I0418 22:22:23.772724 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 22:22:23.772720851 +0000 UTC m=+419.299032919 I0418 22:22:23.804411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:23.804550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:23.804593 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 22:22:23.804584391 +0000 UTC m=+419.330896459 I0418 22:22:23.804632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:23.804755 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 22:22:23.804744564 +0000 UTC m=+419.331056632 I0418 22:22:23.805173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:23.805279 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 22:22:23.805237464 +0000 UTC m=+419.331549522 I0418 22:22:24.031802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:24.092909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:24.120421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6gjfk" condition "Approved" to 2026-04-18 22:22:24.120408059 +0000 UTC m=+419.646720127 I0418 22:22:24.149349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mvtcg" condition "Approved" to 2026-04-18 22:22:24.149337749 +0000 UTC m=+419.675649807 I0418 22:22:24.149962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6gjfk" condition "Ready" to 2026-04-18 22:22:24.149951381 +0000 UTC m=+419.676263449 I0418 22:22:24.163682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mvtcg" condition "Ready" to 2026-04-18 22:22:24.163675647 +0000 UTC m=+419.689987715 I0418 22:22:24.176449 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:24.176437573 +0000 UTC m=+419.702749631 I0418 22:22:24.202985 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:24.202971435 +0000 UTC m=+419.729283503 I0418 22:22:24.207362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:24.207656 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:24.207650149 +0000 UTC m=+419.733962217 I0418 22:22:24.415164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-t8d47" condition "Approved" to 2026-04-18 22:22:24.415143323 +0000 UTC m=+419.941455381 I0418 22:22:24.467868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:24.511747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:24.512183 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:24.512172209 +0000 UTC m=+420.038484277 I0418 22:22:24.819688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-t8d47" condition "Ready" to 2026-04-18 22:22:24.81966632 +0000 UTC m=+420.345978408 I0418 22:22:25.209155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:25.258929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:25.421829 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-t8d47" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-6gtzw" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0418 22:22:25.509253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0418 22:22:25.755980 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-6gtzw\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0418 22:22:25.866952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hr8pf" condition "Approved" to 2026-04-18 22:22:25.866928594 +0000 UTC m=+421.393240662 I0418 22:22:25.921141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hr8pf" condition "Ready" to 2026-04-18 22:22:25.921128972 +0000 UTC m=+421.447441040 I0418 22:22:26.410857 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:26.410834219 +0000 UTC m=+421.937146307 I0418 22:22:26.508800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:26.509494 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:26.509484848 +0000 UTC m=+422.035796906 I0418 22:22:26.709193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:26.810729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:31.385063 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" condition "Ready" to 2026-04-18 22:22:31.385040723 +0000 UTC m=+426.911352811 I0418 22:22:31.385899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:31.385956 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" condition "Issuing" to 2026-04-18 22:22:31.385943661 +0000 UTC m=+426.912255749 I0418 22:22:31.403840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kp72d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:31.403944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:31.403976 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" condition "Issuing" to 2026-04-18 22:22:31.403967453 +0000 UTC m=+426.930279511 I0418 22:22:31.726624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kp72d-7zqvt" condition "Approved" to 2026-04-18 22:22:31.726604297 +0000 UTC m=+427.252916365 I0418 22:22:31.740300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kp72d-7zqvt" condition "Ready" to 2026-04-18 22:22:31.740288212 +0000 UTC m=+427.266600270 I0418 22:22:31.790158 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:31.790142911 +0000 UTC m=+427.316454999 I0418 22:22:31.816611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kp72d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:31.817232 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:31.817221875 +0000 UTC m=+427.343533943 I0418 22:22:31.823467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kp72d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:31.840095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kp72d-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kp72d-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:57.944916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:22:57.944996 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 22:22:57.944980854 +0000 UTC m=+453.471292942 I0418 22:22:57.945610 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 22:22:57.945581956 +0000 UTC m=+453.471894054 I0418 22:22:57.965546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:57.965645 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 22:22:57.965634578 +0000 UTC m=+453.491946676 I0418 22:22:58.119540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:58.148013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2xfk7" condition "Approved" to 2026-04-18 22:22:58.147989307 +0000 UTC m=+453.674301375 I0418 22:22:58.168600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2xfk7" condition "Ready" to 2026-04-18 22:22:58.168578091 +0000 UTC m=+453.694890179 I0418 22:22:58.201219 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:22:58.201203615 +0000 UTC m=+453.727515683 I0418 22:22:58.225089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:22:58.276950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:26:19.293468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:26:19.293498 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 22:26:19.293493066 +0000 UTC m=+654.819805114 I0418 22:26:19.293566 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 22:26:19.293538656 +0000 UTC m=+654.819850754 I0418 22:26:19.311201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:26:19.311389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:26:19.311454 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 22:26:19.311443655 +0000 UTC m=+654.837755723 I0418 22:26:19.481001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ctf4h" condition "Approved" to 2026-04-18 22:26:19.480982707 +0000 UTC m=+655.007294765 I0418 22:26:19.501765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ctf4h" condition "Ready" to 2026-04-18 22:26:19.501749623 +0000 UTC m=+655.028061701 I0418 22:26:19.530782 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:26:19.530769286 +0000 UTC m=+655.057081344 I0418 22:26:19.557936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:26:19.558155 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:26:19.558149365 +0000 UTC m=+655.084461423 I0418 22:26:19.559691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:26:19.575994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:26:19.576380 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:26:19.576366291 +0000 UTC m=+655.102678359 I0418 22:26:19.586265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:28:54.716100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:28:54.716053 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-18 22:28:54.716000034 +0000 UTC m=+810.242312112 I0418 22:28:54.716184 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 22:28:54.716175497 +0000 UTC m=+810.242487585 I0418 22:28:54.733265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:28:54.733340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:28:54.733360 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 22:28:54.733354252 +0000 UTC m=+810.259666320 I0418 22:28:54.998367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:28:55.011798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-nwfsx" condition "Approved" to 2026-04-18 22:28:55.01178415 +0000 UTC m=+810.538096218 I0418 22:28:55.032059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-nwfsx" condition "Ready" to 2026-04-18 22:28:55.032044867 +0000 UTC m=+810.558356935 I0418 22:28:55.094734 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:28:55.094722314 +0000 UTC m=+810.621034412 I0418 22:28:55.117940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:28:55.171247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:30:03.314793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:30:03.314875 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-18 22:30:03.314862993 +0000 UTC m=+878.841175091 I0418 22:30:03.315081 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-18 22:30:03.315060296 +0000 UTC m=+878.841372364 I0418 22:30:03.337349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:30:03.337545 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-18 22:30:03.337531857 +0000 UTC m=+878.863843945 I0418 22:30:03.520717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:30:03.550538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9mlvz" condition "Approved" to 2026-04-18 22:30:03.550522981 +0000 UTC m=+879.076835049 I0418 22:30:03.567814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9mlvz" condition "Ready" to 2026-04-18 22:30:03.567803218 +0000 UTC m=+879.094115286 I0418 22:30:03.602027 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:30:03.602017925 +0000 UTC m=+879.128329993 I0418 22:30:03.620536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:33:17.477982 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-18 22:33:17.477932089 +0000 UTC m=+1073.004244177 I0418 22:33:17.478473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:33:17.478503 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 22:33:17.47849727 +0000 UTC m=+1073.004809368 I0418 22:33:17.493537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:33:17.493609 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:33:17.493627 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 22:33:17.493620973 +0000 UTC m=+1073.019933061 I0418 22:33:17.598199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:33:17.608821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bmc6s" condition "Approved" to 2026-04-18 22:33:17.608803556 +0000 UTC m=+1073.135115654 I0418 22:33:17.626299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bmc6s" condition "Ready" to 2026-04-18 22:33:17.626288328 +0000 UTC m=+1073.152600406 I0418 22:33:17.652835 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:33:17.65281781 +0000 UTC m=+1073.179129908 I0418 22:33:17.682833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"