I0412 17:27:58.994825 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0412 17:27:58.994972 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0412 17:27:58.995077 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0412 17:27:59.002529 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0412 17:27:59.003168 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0412 17:27:59.003260 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0412 17:27:59.003354 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0412 17:27:59.007135 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0412 17:27:59.026076 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0412 17:27:59.026337 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0412 17:27:59.031320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0412 17:27:59.034629 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0412 17:27:59.037426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0412 17:27:59.043826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0412 17:27:59.046445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0412 17:27:59.049142 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0412 17:27:59.049182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0412 17:27:59.051513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0412 17:27:59.053540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0412 17:27:59.055177 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0412 17:27:59.056804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0412 17:27:59.063392 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0412 17:27:59.063432 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0412 17:27:59.063482 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0412 17:27:59.066687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0412 17:27:59.069368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0412 17:27:59.071967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0412 17:27:59.074916 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0412 17:27:59.074954 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0412 17:27:59.077304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0412 17:27:59.079229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0412 17:27:59.081199 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0412 17:27:59.082727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0412 17:27:59.084393 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.086925 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.087003 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.087368 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.087683 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.087761 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.087769 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.088053 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.089111 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:27:59.178174 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 17:28:10.904109 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-12 17:28:10.904091154 +0000 UTC m=+11.941781042 I0412 17:28:11.634520 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:28:11.634599 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 17:28:11.634586916 +0000 UTC m=+12.672276804 I0412 17:28:11.635665 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 17:28:11.635656252 +0000 UTC m=+12.673346140 E0412 17:28:11.650875 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 17:28:11.650928 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-12 17:28:11.650922352 +0000 UTC m=+12.688612210 E0412 17:28:11.650954 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 17:28:11.653089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:28:11.653180 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 17:28:11.653171628 +0000 UTC m=+12.690861486 E0412 17:28:11.666288 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0412 17:28:11.666472 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 17:28:11.666518 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 17:28:11.666568 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0412 17:28:11.670550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:28:11.670618 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 17:28:11.670610071 +0000 UTC m=+12.708299949 I0412 17:28:11.679167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6x4jd" condition "Approved" to 2026-04-12 17:28:11.679153064 +0000 UTC m=+12.716842922 I0412 17:28:11.680506 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 17:28:11.680495327 +0000 UTC m=+12.718185205 I0412 17:28:11.689295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:28:11.690595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6x4jd" condition "Ready" to 2026-04-12 17:28:11.690587818 +0000 UTC m=+12.728277686 I0412 17:28:11.713271 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:28:11.713260312 +0000 UTC m=+12.750950200 I0412 17:28:11.733621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:28:11.784972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:28:16.667712 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:28:16.667685419 +0000 UTC m=+17.705375317 I0412 17:28:38.863235 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:28:38.863283 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 17:28:38.86325752 +0000 UTC m=+39.900947408 I0412 17:28:38.863345 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 17:28:38.863336431 +0000 UTC m=+39.901026309 I0412 17:28:38.893429 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-12 17:28:38.893415538 +0000 UTC m=+39.931105396 I0412 17:28:38.896965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:28:38.897090 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 17:28:38.897082157 +0000 UTC m=+39.934772015 I0412 17:28:39.077895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:28:39.114046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-shjs2" condition "Approved" to 2026-04-12 17:28:39.114034148 +0000 UTC m=+40.151724006 I0412 17:28:39.148194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-shjs2" condition "Ready" to 2026-04-12 17:28:39.148176023 +0000 UTC m=+40.185865911 I0412 17:28:39.183587 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:28:39.183573608 +0000 UTC m=+40.221263466 I0412 17:28:39.207614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:28.209010 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-12 17:30:28.208957111 +0000 UTC m=+149.246646989 I0412 17:30:28.209087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:30:28.209306 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 17:30:28.209287939 +0000 UTC m=+149.246977817 I0412 17:30:28.243270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:28.243404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:30:28.243439 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 17:30:28.243431075 +0000 UTC m=+149.281120963 E0412 17:30:28.273723 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 17:30:28.273856 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-12 17:30:28.27384265 +0000 UTC m=+149.311532528 I0412 17:30:28.273926 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0412 17:30:28.291489 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0412 17:30:28.291595 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 17:30:28.291627 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0412 17:30:28.291664 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0412 17:30:28.307815 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-12 17:30:28.307783811 +0000 UTC m=+149.345473689 I0412 17:30:28.308027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:30:28.308091 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 17:30:28.308074248 +0000 UTC m=+149.345764126 I0412 17:30:28.333916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:28.334060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:30:28.334124 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 17:30:28.334106447 +0000 UTC m=+149.371796325 I0412 17:30:28.597483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:28.611058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-nt8vs" condition "Approved" to 2026-04-12 17:30:28.611029575 +0000 UTC m=+149.648719453 I0412 17:30:28.643778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-nt8vs" condition "Ready" to 2026-04-12 17:30:28.643760626 +0000 UTC m=+149.681450504 I0412 17:30:28.761873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:28.762622 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:30:28.762598141 +0000 UTC m=+149.800288019 I0412 17:30:28.764463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-jbcnk" condition "Approved" to 2026-04-12 17:30:28.764445015 +0000 UTC m=+149.802134863 I0412 17:30:28.831507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-jbcnk" condition "Ready" to 2026-04-12 17:30:28.831494527 +0000 UTC m=+149.869184375 I0412 17:30:28.838555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:28.838867 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:30:28.838860705 +0000 UTC m=+149.876550543 I0412 17:30:28.963680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:33.292266 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:30:33.292247049 +0000 UTC m=+154.329936937 I0412 17:30:33.340942 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-jbcnk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:30:33.340921916 +0000 UTC m=+154.378611804 I0412 17:30:33.492313 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:30:33.492292187 +0000 UTC m=+154.529982075 I0412 17:30:33.731756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:33.732188 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:30:33.732178939 +0000 UTC m=+154.769868797 I0412 17:30:33.864784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:30:33.867436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:33:18.875290 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-200.nip.io-tls" condition "Ready" to 2026-04-12 17:33:18.875270449 +0000 UTC m=+319.912960297 I0412 17:33:18.875295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-200.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:33:18.875551 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-200.nip.io-tls" condition "Issuing" to 2026-04-12 17:33:18.875512365 +0000 UTC m=+319.913202223 I0412 17:33:18.893270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:33:18.893347 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-200.nip.io-tls" condition "Ready" to 2026-04-12 17:33:18.893340343 +0000 UTC m=+319.931030191 I0412 17:33:19.310730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:33:19.347314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-200.nip.io-tls-7pznh" condition "Approved" to 2026-04-12 17:33:19.347297061 +0000 UTC m=+320.384986949 I0412 17:33:19.368056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-200.nip.io-tls-7pznh" condition "Ready" to 2026-04-12 17:33:19.36804302 +0000 UTC m=+320.405732878 I0412 17:33:19.394167 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-200.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:33:19.394153178 +0000 UTC m=+320.431843036 I0412 17:33:19.418025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:34:29.785105 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 17:34:29.785086638 +0000 UTC m=+390.822776516 I0412 17:34:29.785613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:34:29.785709 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 17:34:29.785697742 +0000 UTC m=+390.823387620 E0412 17:34:29.799228 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 17:34:29.799295 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-12 17:34:29.799286158 +0000 UTC m=+390.836976016 E0412 17:34:29.799329 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 17:34:29.801233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:34:29.801325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:34:29.801352 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 17:34:29.801343838 +0000 UTC m=+390.839033726 E0412 17:34:29.809670 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0412 17:34:29.809762 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 17:34:29.809800 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 17:34:29.809846 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0412 17:34:29.833589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-94x8n" condition "Approved" to 2026-04-12 17:34:29.83357483 +0000 UTC m=+390.871264708 I0412 17:34:29.834729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:34:29.843976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-94x8n" condition "Ready" to 2026-04-12 17:34:29.843964569 +0000 UTC m=+390.881654437 I0412 17:34:29.865580 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:34:29.865566667 +0000 UTC m=+390.903256555 I0412 17:34:29.880298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:34:34.810137 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:34:34.810122871 +0000 UTC m=+395.847812749 I0412 17:35:13.229895 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 17:35:13.229840367 +0000 UTC m=+434.267530205 I0412 17:35:13.231988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:35:13.232068 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 17:35:13.2320592 +0000 UTC m=+434.269749078 I0412 17:35:13.235508 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 17:35:13.235489202 +0000 UTC m=+434.273179060 I0412 17:35:13.235901 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 17:35:13.235889772 +0000 UTC m=+434.273579630 I0412 17:35:13.236042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:35:13.236071 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 17:35:13.236066946 +0000 UTC m=+434.273756804 I0412 17:35:13.236297 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:35:13.236347 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 17:35:13.236336192 +0000 UTC m=+434.274026040 I0412 17:35:13.254656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:13.255110 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 17:35:13.25509893 +0000 UTC m=+434.292788808 I0412 17:35:13.256737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:13.256814 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 17:35:13.256806281 +0000 UTC m=+434.294496129 I0412 17:35:13.266682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:13.268398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:35:13.268563 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 17:35:13.268429408 +0000 UTC m=+434.306119266 I0412 17:35:13.431426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:13.470739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:13.476747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ms29w" condition "Approved" to 2026-04-12 17:35:13.47673465 +0000 UTC m=+434.514424488 I0412 17:35:13.497568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ms29w" condition "Ready" to 2026-04-12 17:35:13.497554807 +0000 UTC m=+434.535244665 I0412 17:35:13.518283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mjml7" condition "Approved" to 2026-04-12 17:35:13.518271682 +0000 UTC m=+434.555961560 I0412 17:35:13.537052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mjml7" condition "Ready" to 2026-04-12 17:35:13.537033779 +0000 UTC m=+434.574723637 I0412 17:35:13.554346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:35:13.554394 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 17:35:13.554385704 +0000 UTC m=+434.592075562 I0412 17:35:13.569813 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:35:13.569796912 +0000 UTC m=+434.607486750 I0412 17:35:13.581286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:13.581419 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:35:13.581395538 +0000 UTC m=+434.619085386 I0412 17:35:13.582317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:13.582651 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:35:13.582643598 +0000 UTC m=+434.620333446 I0412 17:35:13.668303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:13.668785 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:35:13.668777694 +0000 UTC m=+434.706467542 I0412 17:35:14.125940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h5pbs" condition "Approved" to 2026-04-12 17:35:14.125914425 +0000 UTC m=+435.163604303 I0412 17:35:14.179820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:14.223731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:14.640183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h5pbs" condition "Ready" to 2026-04-12 17:35:14.640158858 +0000 UTC m=+435.677848736 I0412 17:35:14.771422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:14.827125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jf48l" condition "Approved" to 2026-04-12 17:35:14.82709871 +0000 UTC m=+435.864788558 I0412 17:35:15.329526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jf48l" condition "Ready" to 2026-04-12 17:35:15.329505902 +0000 UTC m=+436.367195790 I0412 17:35:15.673682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:15.770976 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:35:15.770960498 +0000 UTC m=+436.808650366 I0412 17:35:16.017270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:16.017586 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:35:16.017578794 +0000 UTC m=+437.055268642 I0412 17:35:16.070829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:16.370807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:16.423916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:22.700989 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bz25p-tls" condition "Ready" to 2026-04-12 17:35:22.700970689 +0000 UTC m=+443.738660557 I0412 17:35:22.701014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bz25p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:35:22.701054 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bz25p-tls" condition "Issuing" to 2026-04-12 17:35:22.701043211 +0000 UTC m=+443.738733089 I0412 17:35:22.725433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bz25p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bz25p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:22.725583 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bz25p-tls" condition "Ready" to 2026-04-12 17:35:22.725551316 +0000 UTC m=+443.763241174 I0412 17:35:23.047214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bz25p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bz25p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:23.083481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bz25p-xvrxh" condition "Approved" to 2026-04-12 17:35:23.083469198 +0000 UTC m=+444.121159056 I0412 17:35:23.101162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bz25p-xvrxh" condition "Ready" to 2026-04-12 17:35:23.10114794 +0000 UTC m=+444.138837798 I0412 17:35:23.135221 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bz25p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:35:23.135207213 +0000 UTC m=+444.172897071 I0412 17:35:23.163499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bz25p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bz25p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:49.772554 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 17:35:49.772535455 +0000 UTC m=+470.810225343 I0412 17:35:49.772653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:35:49.772715 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 17:35:49.772677858 +0000 UTC m=+470.810367696 I0412 17:35:49.788631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:49.788712 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 17:35:49.788703551 +0000 UTC m=+470.826393409 I0412 17:35:50.039833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:35:50.070103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pv4pm" condition "Approved" to 2026-04-12 17:35:50.070083107 +0000 UTC m=+471.107772995 I0412 17:35:50.091144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pv4pm" condition "Ready" to 2026-04-12 17:35:50.091133449 +0000 UTC m=+471.128823287 I0412 17:35:50.128264 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:35:50.128247705 +0000 UTC m=+471.165937563 I0412 17:35:50.149512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:39:16.511731 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 17:39:16.511695032 +0000 UTC m=+677.549384920 I0412 17:39:16.511880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:39:16.512031 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-12 17:39:16.512017829 +0000 UTC m=+677.549707737 I0412 17:39:16.533611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:39:16.533693 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 17:39:16.533684836 +0000 UTC m=+677.571374694 I0412 17:39:16.677454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:39:16.711650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lbvlm" condition "Approved" to 2026-04-12 17:39:16.711637464 +0000 UTC m=+677.749327322 I0412 17:39:16.731304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lbvlm" condition "Ready" to 2026-04-12 17:39:16.731291652 +0000 UTC m=+677.768981500 I0412 17:39:16.762782 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:39:16.762770962 +0000 UTC m=+677.800460820 I0412 17:39:16.787802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:39:16.788416 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:39:16.788409053 +0000 UTC m=+677.826098911 I0412 17:39:16.800638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:39:16.816335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:41:40.848750 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-12 17:41:40.848685713 +0000 UTC m=+821.886375591 I0412 17:41:40.848829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:41:40.848947 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-12 17:41:40.848933369 +0000 UTC m=+821.886623227 I0412 17:41:40.873402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:41:40.873530 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-12 17:41:40.873516303 +0000 UTC m=+821.911206191 I0412 17:41:41.339364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:41:41.373915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-b529s" condition "Approved" to 2026-04-12 17:41:41.373898488 +0000 UTC m=+822.411588366 I0412 17:41:41.396126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-b529s" condition "Ready" to 2026-04-12 17:41:41.396110476 +0000 UTC m=+822.433800334 I0412 17:41:41.430904 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:41:41.430890563 +0000 UTC m=+822.468580411 I0412 17:41:41.452960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:42:51.011374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:42:51.011566 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-12 17:42:51.011543892 +0000 UTC m=+892.049233780 I0412 17:42:51.012153 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 17:42:51.012146336 +0000 UTC m=+892.049836194 I0412 17:42:51.027581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:42:51.027715 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 17:42:51.027703836 +0000 UTC m=+892.065393694 I0412 17:42:51.345457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:42:51.384691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5tcqk" condition "Approved" to 2026-04-12 17:42:51.384673891 +0000 UTC m=+892.422363739 I0412 17:42:51.404653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5tcqk" condition "Ready" to 2026-04-12 17:42:51.404638025 +0000 UTC m=+892.442327873 I0412 17:42:51.438752 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:42:51.438735196 +0000 UTC m=+892.476425054 I0412 17:42:51.464988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:45:55.183709 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-12 17:45:55.183689772 +0000 UTC m=+1076.221379660 I0412 17:45:55.184187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:45:55.184303 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-12 17:45:55.184290476 +0000 UTC m=+1076.221980354 I0412 17:45:55.204095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 17:45:55.204181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 17:45:55.204204 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-12 17:45:55.204196169 +0000 UTC m=+1076.241886027 I0412 17:45:55.434266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gtdw9" condition "Approved" to 2026-04-12 17:45:55.434243659 +0000 UTC m=+1076.471933547 I0412 17:45:55.453779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gtdw9" condition "Ready" to 2026-04-12 17:45:55.453769762 +0000 UTC m=+1076.491459610 I0412 17:45:55.480841 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 17:45:55.480827934 +0000 UTC m=+1076.518517792 I0412 17:45:55.507891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"