I0420 14:22:19.705665 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 14:22:19.705777 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 14:22:19.705835 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 14:22:19.711421 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 14:22:19.711947 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 14:22:19.712188 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 14:22:19.712213 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 14:22:19.716950 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 14:22:19.731015 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 14:22:19.735776 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 14:22:19.735831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 14:22:19.738873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 14:22:19.741453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 14:22:19.745806 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 14:22:19.748770 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 14:22:19.748793 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 14:22:19.748894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 14:22:19.751285 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 14:22:19.754097 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 14:22:19.756604 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 14:22:19.756753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 14:22:19.758487 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 14:22:19.760389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 14:22:19.762293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 14:22:19.765734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 14:22:19.770630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 14:22:19.773429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 14:22:19.773488 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 14:22:19.776021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 14:22:19.778700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 14:22:19.780724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 14:22:19.782413 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 14:22:19.783229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 14:22:19.785660 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.786869 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.787322 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.807102 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.817480 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.831437 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.848329 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.867195 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.873707 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:19.883569 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:32.802411 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 14:22:32.802396261 +0000 UTC m=+13.127977097 I0420 14:22:33.538780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:22:33.538832 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:22:33.53882256 +0000 UTC m=+13.864403396 I0420 14:22:33.538769 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 14:22:33.538751779 +0000 UTC m=+13.864332625 E0420 14:22:33.556107 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:22:33.556252 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 14:22:33.556241244 +0000 UTC m=+13.881822060 E0420 14:22:33.556290 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:22:33.558721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:33.559006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:22:33.559050 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:22:33.559038864 +0000 UTC m=+13.884619710 E0420 14:22:33.570116 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 14:22:33.570428 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:22:33.570605 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:22:33.570811 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 14:22:33.608289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tq9nj" condition "Approved" to 2026-04-20 14:22:33.608264751 +0000 UTC m=+13.933845557 I0420 14:22:33.621186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tq9nj" condition "Ready" to 2026-04-20 14:22:33.621167313 +0000 UTC m=+13.946748119 I0420 14:22:33.647373 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:33.647351735 +0000 UTC m=+13.972932541 I0420 14:22:33.666566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:33.666976 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:33.666967474 +0000 UTC m=+13.992548290 I0420 14:22:33.681012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:33.682789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:33.683160 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:33.683150897 +0000 UTC m=+14.008731703 I0420 14:22:38.570962 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:38.570950954 +0000 UTC m=+18.896531780 I0420 14:23:01.254281 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:23:01.25425711 +0000 UTC m=+41.579837926 I0420 14:23:01.254380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:23:01.254513 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 14:23:01.254501456 +0000 UTC m=+41.580082292 I0420 14:23:01.263989 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 14:23:01.263966292 +0000 UTC m=+41.589547128 I0420 14:23:01.285998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:01.286100 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:23:01.286089353 +0000 UTC m=+41.611670169 I0420 14:23:01.482571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:01.525218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kq64v" condition "Approved" to 2026-04-20 14:23:01.525204871 +0000 UTC m=+41.850785707 I0420 14:23:01.560052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kq64v" condition "Ready" to 2026-04-20 14:23:01.560036259 +0000 UTC m=+41.885617075 I0420 14:23:01.591596 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:01.591575345 +0000 UTC m=+41.917156191 I0420 14:23:01.617176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:01.617541 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:01.617535171 +0000 UTC m=+41.943115967 I0420 14:23:01.642300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:01.642667 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:01.642632467 +0000 UTC m=+41.968213283 I0420 14:24:51.095296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:24:51.095417 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 14:24:51.095374408 +0000 UTC m=+151.420955244 I0420 14:24:51.095420 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 14:24:51.095373918 +0000 UTC m=+151.420954764 E0420 14:24:51.111458 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 14:24:51.111589 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 14:24:51.111579684 +0000 UTC m=+151.437160500 I0420 14:24:51.111621 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 14:24:51.113263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:51.113350 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 14:24:51.113344337 +0000 UTC m=+151.438925153 E0420 14:24:51.123048 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 14:24:51.123155 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 14:24:51.123184 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 14:24:51.123222 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 14:24:51.124161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:24:51.124216 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 14:24:51.124195512 +0000 UTC m=+151.449776448 I0420 14:24:51.124252 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 14:24:51.124188942 +0000 UTC m=+151.449769768 I0420 14:24:51.141283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:51.141391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:24:51.141457 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 14:24:51.141450453 +0000 UTC m=+151.467031269 I0420 14:24:51.347907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:51.354839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hxw8n" condition "Approved" to 2026-04-20 14:24:51.354817466 +0000 UTC m=+151.680398312 I0420 14:24:51.373248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:51.378456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hxw8n" condition "Ready" to 2026-04-20 14:24:51.378437531 +0000 UTC m=+151.704018347 I0420 14:24:51.403490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rjgmj" condition "Approved" to 2026-04-20 14:24:51.403468832 +0000 UTC m=+151.729049668 I0420 14:24:51.435354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rjgmj" condition "Ready" to 2026-04-20 14:24:51.435333129 +0000 UTC m=+151.760913975 I0420 14:24:51.464827 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:24:51.464814198 +0000 UTC m=+151.790395014 I0420 14:24:51.487741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:51.538416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:56.124478 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:24:56.124463421 +0000 UTC m=+156.450044257 I0420 14:24:56.205787 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-hxw8n" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:24:56.205767133 +0000 UTC m=+156.531347979 I0420 14:24:56.359412 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:24:56.359390749 +0000 UTC m=+156.684971605 I0420 14:24:56.418988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:24:56.419693 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:24:56.419676509 +0000 UTC m=+156.745257355 I0420 14:24:56.470252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:43.960785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:43.960849 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-20 14:27:43.960833095 +0000 UTC m=+324.286413931 I0420 14:27:43.960848 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-20 14:27:43.960732992 +0000 UTC m=+324.286313838 I0420 14:27:43.979446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:43.979519 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-20 14:27:43.97951136 +0000 UTC m=+324.305092176 I0420 14:27:44.228867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:44.259323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-thflk" condition "Approved" to 2026-04-20 14:27:44.259303347 +0000 UTC m=+324.584884163 I0420 14:27:44.282449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-thflk" condition "Ready" to 2026-04-20 14:27:44.282433082 +0000 UTC m=+324.608013928 I0420 14:27:44.311975 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:44.311958594 +0000 UTC m=+324.637539410 I0420 14:27:44.332996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:57.587754 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 14:28:57.587732041 +0000 UTC m=+397.913312857 I0420 14:28:57.588231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:28:57.588347 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 14:28:57.588329475 +0000 UTC m=+397.913910321 I0420 14:28:57.602948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:57.603086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:28:57.603122 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 14:28:57.603111596 +0000 UTC m=+397.928692442 E0420 14:28:57.610015 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:28:57.610068 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 14:28:57.610059987 +0000 UTC m=+397.935640813 E0420 14:28:57.610218 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:28:57.620722 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 14:28:57.620841 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:28:57.620997 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:28:57.621081 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 14:28:57.638753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:57.645499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rm2vt" condition "Approved" to 2026-04-20 14:28:57.645481443 +0000 UTC m=+397.971062259 I0420 14:28:57.660787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rm2vt" condition "Ready" to 2026-04-20 14:28:57.660771166 +0000 UTC m=+397.986352002 I0420 14:28:57.685514 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:57.68550512 +0000 UTC m=+398.011085936 I0420 14:28:57.709336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:57.709832 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:57.709822505 +0000 UTC m=+398.035403341 I0420 14:28:57.722397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:57.729903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:57.730227 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:57.730219443 +0000 UTC m=+398.055800259 I0420 14:29:02.621331 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:02.621310273 +0000 UTC m=+402.946891119 I0420 14:29:43.578863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:43.578934 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:29:43.578926785 +0000 UTC m=+443.904507591 I0420 14:29:43.579293 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 14:29:43.579269633 +0000 UTC m=+443.904850439 I0420 14:29:43.586932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:43.586968 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 14:29:43.586963871 +0000 UTC m=+443.912544677 I0420 14:29:43.587131 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:29:43.587113415 +0000 UTC m=+443.912694231 I0420 14:29:43.587307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:43.587323 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 14:29:43.5873201 +0000 UTC m=+443.912900896 I0420 14:29:43.587469 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 14:29:43.587455393 +0000 UTC m=+443.913036199 I0420 14:29:43.610696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:43.610787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:43.610888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:43.610929 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:29:43.610920057 +0000 UTC m=+443.936500883 I0420 14:29:43.610974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:43.611013 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 14:29:43.611005789 +0000 UTC m=+443.936586605 I0420 14:29:43.617968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:43.618069 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:29:43.618060071 +0000 UTC m=+443.943640877 I0420 14:29:43.752252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:43.788207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-55ghv" condition "Approved" to 2026-04-20 14:29:43.788180008 +0000 UTC m=+444.113760854 I0420 14:29:43.811493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-55ghv" condition "Ready" to 2026-04-20 14:29:43.811450196 +0000 UTC m=+444.137031012 I0420 14:29:43.859001 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:43.858981388 +0000 UTC m=+444.184562214 I0420 14:29:43.889458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:43.889847 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:43.889837862 +0000 UTC m=+444.215418668 I0420 14:29:43.922193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-769mj" condition "Approved" to 2026-04-20 14:29:43.922167842 +0000 UTC m=+444.247748688 I0420 14:29:43.969896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:43.972787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-769mj" condition "Ready" to 2026-04-20 14:29:43.972778328 +0000 UTC m=+444.298359144 I0420 14:29:43.976490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:44.159471 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:44.15945119 +0000 UTC m=+444.485032026 I0420 14:29:44.165063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:44.223796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m64zp" condition "Approved" to 2026-04-20 14:29:44.223769412 +0000 UTC m=+444.549350268 I0420 14:29:44.315541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:44.316036 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:44.316025675 +0000 UTC m=+444.641606491 I0420 14:29:44.426008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m64zp" condition "Ready" to 2026-04-20 14:29:44.425995343 +0000 UTC m=+444.751576149 I0420 14:29:45.064559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:45.118109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:45.166924 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:45.166905786 +0000 UTC m=+445.492486602 I0420 14:29:45.316571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:45.316857 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:45.31684938 +0000 UTC m=+445.642430196 I0420 14:29:45.515106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:52.264081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h855s-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:52.264453 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h855s-tls" condition "Issuing" to 2026-04-20 14:29:52.264435988 +0000 UTC m=+452.590016834 I0420 14:29:52.264336 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h855s-tls" condition "Ready" to 2026-04-20 14:29:52.264311185 +0000 UTC m=+452.589892031 I0420 14:29:52.282821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h855s-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h855s-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:52.282989 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h855s-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:52.283162 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-h855s-tls" condition "Issuing" to 2026-04-20 14:29:52.283152024 +0000 UTC m=+452.608732840 I0420 14:29:52.471787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h855s-m8rds" condition "Approved" to 2026-04-20 14:29:52.471765544 +0000 UTC m=+452.797346360 I0420 14:29:52.493994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-h855s-m8rds" condition "Ready" to 2026-04-20 14:29:52.493975656 +0000 UTC m=+452.819556462 I0420 14:29:52.537747 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h855s-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:52.537727615 +0000 UTC m=+452.863308431 I0420 14:29:52.557930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h855s-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h855s-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:52.558231 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-h855s-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:52.558222816 +0000 UTC m=+452.883803632 I0420 14:29:52.570708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h855s-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h855s-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:52.579617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-h855s-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-h855s-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:16.516050 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:30:16.516103 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 14:30:16.516090334 +0000 UTC m=+476.841671180 I0420 14:30:16.516374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 14:30:16.51636185 +0000 UTC m=+476.841942686 I0420 14:30:16.534586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:16.534725 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:30:16.534754 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 14:30:16.534744133 +0000 UTC m=+476.860324949 I0420 14:30:16.809923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:16.817796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zp8xn" condition "Approved" to 2026-04-20 14:30:16.817777866 +0000 UTC m=+477.143358702 I0420 14:30:16.878898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zp8xn" condition "Ready" to 2026-04-20 14:30:16.878884045 +0000 UTC m=+477.204464861 I0420 14:30:16.923596 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:30:16.923581352 +0000 UTC m=+477.249162198 I0420 14:30:16.948434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:16.948864 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:30:16.948854208 +0000 UTC m=+477.274435024 I0420 14:30:16.970370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:44.906326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:33:44.906414 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 14:33:44.906403735 +0000 UTC m=+685.231984571 I0420 14:33:44.906452 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 14:33:44.906428186 +0000 UTC m=+685.232009022 I0420 14:33:44.922407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:44.922511 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 14:33:44.922503945 +0000 UTC m=+685.248084761 I0420 14:33:45.085507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:45.118636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4p9bl" condition "Approved" to 2026-04-20 14:33:45.118619663 +0000 UTC m=+685.444200479 I0420 14:33:45.140160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4p9bl" condition "Ready" to 2026-04-20 14:33:45.140142268 +0000 UTC m=+685.465723094 I0420 14:33:45.172389 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:33:45.172372158 +0000 UTC m=+685.497952974 I0420 14:33:45.194918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:36:18.316101 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 14:36:18.316082955 +0000 UTC m=+838.641663771 I0420 14:36:18.316253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:36:18.316519 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 14:36:18.316506155 +0000 UTC m=+838.642087031 I0420 14:36:18.337243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:36:18.337390 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 14:36:18.337378669 +0000 UTC m=+838.662959505 I0420 14:36:18.766182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:36:18.796795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bkz79" condition "Approved" to 2026-04-20 14:36:18.796777811 +0000 UTC m=+839.122358627 I0420 14:36:18.818569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bkz79" condition "Ready" to 2026-04-20 14:36:18.818556969 +0000 UTC m=+839.144137785 I0420 14:36:18.870363 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:36:18.870349797 +0000 UTC m=+839.195930613 I0420 14:36:18.898347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:36:18.899016 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:36:18.899007385 +0000 UTC m=+839.224588201 I0420 14:36:18.919502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:36:18.919929 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:36:18.919918381 +0000 UTC m=+839.245499207 I0420 14:37:46.089747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:37:46.089786 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 14:37:46.08977856 +0000 UTC m=+926.415359376 I0420 14:37:46.089740 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 14:37:46.089722578 +0000 UTC m=+926.415303394 I0420 14:37:46.117725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:37:46.117797 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 14:37:46.117787955 +0000 UTC m=+926.443368771 I0420 14:37:46.430792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:37:46.470926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7ntf7" condition "Approved" to 2026-04-20 14:37:46.4709017 +0000 UTC m=+926.796482546 I0420 14:37:46.495747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7ntf7" condition "Ready" to 2026-04-20 14:37:46.495720367 +0000 UTC m=+926.821301213 I0420 14:37:46.540010 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:37:46.53999114 +0000 UTC m=+926.865571986 I0420 14:37:46.562391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:37:46.562760 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:37:46.562753197 +0000 UTC m=+926.888334013 I0420 14:37:46.579213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:37:46.588177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:41:04.395482 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 14:41:04.395457868 +0000 UTC m=+1124.721038714 I0420 14:41:04.395669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:41:04.395777 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 14:41:04.395762256 +0000 UTC m=+1124.721343102 I0420 14:41:04.429118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:41:04.429253 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 14:41:04.429242381 +0000 UTC m=+1124.754823197 I0420 14:41:04.546317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:41:04.605706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-c4mn5" condition "Approved" to 2026-04-20 14:41:04.605689819 +0000 UTC m=+1124.931270665 I0420 14:41:04.627272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-c4mn5" condition "Ready" to 2026-04-20 14:41:04.62725919 +0000 UTC m=+1124.952840006 I0420 14:41:04.664825 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:41:04.664809675 +0000 UTC m=+1124.990390471 I0420 14:41:04.694963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:41:04.695496 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:41:04.695483961 +0000 UTC m=+1125.021064777 I0420 14:41:04.718550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"